A.IT alignment to business objectives

B.Level of residual risk

C.Key risk indicators (KRIs)

D.The results of a gap analysis

A.perform regular audits.

B.assign ownership

C.review progress reports

D.create an action plan

A.Rerun procedures

B.Periodic access review

C.Access control software

D.Limit check

A.Data protection impact assessments are performed on a regular basis.

B.Personal data certifications are performed to prevent excessive data collection.

C.Personal data attributed to a specific data subject is tokenized.

D.Data retention guidelines are documented, established, and enforced.

A.Network monitoring infrastructure

B.Incident management process

C.Centralized log management

D.Centralized vulnerability management