is incorrect. Manual controls usually not form strong internal control environment. By not automating SOD controls, there is, potentially, the issue of these controls becoming a barrier in serving the customer. As manual authorizations are often time consuming and require another step in any business process, this takes time away from serving the customer. Automated compliance solutions aim to provide enterprises with timely and efficient internal controls that do not disrupt their normal business process. Answer:A is incorrect. An RMIS can be a very effective tool in monitoring all risk factors that impact the enterprise. The danger is that many important classes of risk may be omitted from consideration by the system. hence it doesn't ensure strong internal control environment.

is incorrect. The IT strategic plan exists to support the enterprise's strategic plan but is
not solely considered while designing information system control.

Explanation/Reference:
Explanation:
When the risk events occur then following tasks have to done to react to it:
Maintain incident response plans

Monitor risk

Initiate incident response

Communicate lessons learned from risk events