A.Analyzing server logs

B.Analyzing intrusion detection system (IDS) logs

C.Using a third-party monitoring provider

D.Coordinating events with appropriate agencies

A.Preventing the generation of false alerts

B.Determining threshold levels

C.Automating log data analysis

D.Updating the threat inventory with new threats

A.Standard operating procedures

B.SWOT analysis

C.Industry benchmarking

D.Control gap analysis

A.Risk manager

B.Internal audit

C.Control owner

D.Senior management

A.Residual risk

B.Secondary risk

C.Infinitive risk

D.Populated risk

E.Explanation:
Secondary risks are the risks that come about as a result of implementing a risk response. This
new risk event must be recorded, analyzed, and planned for management.

F.is incorrect. A residual risk event is similar to a secondary risk, but is often small in
probability and impact, so it may just be accepted.

G.is incorrect. Populated risk event is not a valid project management term.