Select the most appropriate level of responsibility for managing each of the following risks.

An electricity company owns and operates a nuclear power station located ten miles from a large city. A recent and very extensive engineering examination of the power station concludes with the estimate that the probability of a major nuclear disaster within the next 20 years is 0.2%.
Which of the following best explains the relevance of quantifying the risk in that way?

K has several subsidiary companies. The directors of K's subsidiaries are paid an annual bonus based upon their particular subsidiary's reported profits.
The directors of one of K's subsidiaries are considering the choice between two models of a machine.
Which of the following is most likely to explain the decision to choose model X over model Y?

Systems Development Lifecycle (SDLC) is used to manage risk within the development of new computer systems.
Which THREE of the following are appropriate controls to manage risk within the SDLC Process?

R is a manufacturer of biscuits. The market for biscuits is extremely competitive with many companies competing for contracts with large supermarkets. The intensity of the competition means that prices are kept low; and the buyers can demand higher levels of quality, and greater flexibility in supply arrangements.
Which of the following represent ways that the use of an Information System could help R to win and retain supermarket contracts in such a competitive market?