A.Performing periodic data reviews according to policy

B.Being accountable for control design

C.Reporting and escalating data breaches to senior management

D.Ensuring data is protected according to the classification

A.Availability of in-house resources

B.Completeness of system documentation

C.Variances between planned and actual cost

D.Results of end user acceptance testing

A.develop understandable and realistic risk scenarios

B.perform an aggregated cost-benefit analysis

C.identify root causes for relevant events

D.develop a comprehensive risk mitigation strategy

A.Risk response

B.Risk appetite

C.Risk magnitude

D.Risk tolerance

A.The acceptable variation relative to the achievement of objectives

B.The amount of risk an organization is willing to accept

C.Acceptable variation between risk thresholds and business objectives

D.The effective management of risk and internal control environments