A.Adherence to governing policies

B.Regular stakeholder briefings

C.Independent audit results

D.Risk assessment results

A.Require the vendor to correct significant vulnerabilities prior to installation.

B.Review software license to determine the vendor's responsibility regarding vulnerabilities.

C.Review the risk of implementing versus postponing with stakeholders.

D.Run vulnerability testing tools to independently verify the vulnerabilities.

A.organization's risk function

B.service provider's audit function

C.organization's IT management

D.service provider's IT security function

A.The ability to adapt as new elements are added to the environment

B.The ability to ensure the control remains in place when it fails

C.The ability to protect itself from exploitation or attack

D.The ability to be applied in same manner throughout the organization

E.Explanation:
Sustainability of the controls or monitoring tools refers to its ability to function as expected over
time or when changes are made to the environment.

F.is incorrect. This is not valid definition for defining sustainability of al tool.

G.is incorrect. Sustainability ensures that controls changes with the conditions, so as not
to fail in any circumstances. Hence this in not valid answer.

A.Customer database manager

B.Audit committee

C.Data privacy officer

D.Customer data custodian