A.To determine the basis for proposing an increase in security budgets

B.To determine critical information for executive management

C.To determine if existing vulnerabilities present a risk

D.To determine if existing business continuity plans are adequate

A.Assess the residual risk

B.Update the system's documentation

C.Share lessons learned with the organization

D.Allocate budget for penetration testing

A.Rating of the organization s security, based on international standards

B.Risk analysis specific to the organization

C.Research on trends in global information security breaches

D.Annual report of security incidents within the organization

A.Lack of standard operating procedures

B.Lack of security audits

C.Lack of executive support

D.Lack of risk assessments

A.a framework of operational standards

B.the desired range of security settings

C.a standard of acceptable settings

D.the organization's preferred security level.