KLO is a major quoted car rental company The company is considering publishing its first cyber risk management report AH rental bookings are made online Customers receive a booking reference number that they use to collect their cars from a convenient branch Customers enter their credit card details both so that KLO can take payment for their rental and also so that the customers can be charged automatically for late returns or damage to cars KLO's management believes that it has three key areas of cyber risk Cyber criminals may wish to make bookings using fictitious data in order to steal KLO's cars, they may wish to use customers details to identify addresses of people who are away from home so that they can burgle houses and they may wish to abuse customer credit card details KLO's Board is concerned that admitting to the nsk of stealing cars might encourage cnminals to exploit that vulnerability AJso. it is concerned that customers will be reluctant to rent cars if that would mean that their homes could be at risk of burglary while they are away The vulnerability of credit card details seems obvious and so the Board is not reluctant to admit to that.
Which TWO of the following are correct?

Which of the following are threats to the control environment?

Which risks should be given the highest priority?

A's directors do not believe that they always get value for money from their investment in capital projects. Over the past decade the company has invested in 55 projects that have cost more than $1m. They are considering introducing a system of post completion audit to see if this will help them to understand any problems they have had with projects in the past. They hope to use the results of the post completion audits to significantly improve the results of their capital investments State whether you agree or disagree with the points raised by A's directors.

Which of the following is NOT a financial risk.