A.Risk appetite.

B.Industry best practices.

C.Key risk indicators.

D.Audit findings.

A.Risk treatment options

B.The multiple risk factors addressed by a chosen response

C.Capability of enterprise to implement

D.Relative positions on the risk map

A.Creating a separate risk register for key business units

B.Performing real-time monitoring of threats

C.Performing regular risk control self-assessments

D.Reviewing the implementation of the risk response

A.A risk register.

B.Key performance indicators.

C.Control self-assessment.

D.Risk policy requirements.

A.Business impact analysis (BIA)

B.Fault tree analysis

C.Historical trend analysis

D.Root cause analysis