A.Effectiveness and efficiency of controls

B.Residual risk and risk appetite

C.Strength of detective and preventative controls

D.Inherent risk and risk tolerance

A.An assessment of recovery scenarios

B.An assessment of threats to the organization

C.industry standard framework

D.Documentation of testing procedures

A.Reduce exposure to vulnerabilities

B.Ensure new hires have the required skills

C.Reduce internal threats

D.Eliminate risk associated with personnel

A.assist internal audit in evaluating and initiating remediation efforts.

B.ensure compliance with IT governance strategy.

C.facilitate the comparison of the current and desired states.

D.benchmark IT controls with industry standards.

A.current vulnerabilities

B.a suitable alternate site

C.recovery time objectives

D.critical business processes