Change management is a process that ensures changes to systems or processes are introduced in a controlled and coordinated manner. Change management helps to minimize the impact of changes on the business operations and avoid unintended consequences or errors1 Change management can help resolve the issue of Group Policy Object updates affecting multiple services by ensuring that the updates are properly planned, tested, approved, documented, communicated, and monitored.

The syslog entries show the attempts of users to run commands with elevated permissions on two servers: webserver and financeserver. The entries include the date and time, the server name, the command used (su or sudo), the user name, and the outcome (success or failed). The policy of the organization states that users should always run commands under their own account, with temporary administrator privileges if necessary. This means that users should use sudo to run commands as another user (usually root), rather than su to switch to another user's account. Therefore, the entry that should cause the analyst the most concern is D. <100> 2020-01-10T19:34...002z financeserver su 201 32001 = BOM ' su vi success. This entry shows that someone used su to switch to another user's account on the financeserver and successfully edited a file with vi. This could indicate an unauthorized access or a compromised account.

The order of priority for risk mitigation from highest to lowest is C, B, A, D. This order is based on applying the risk mitigation policies of the organization. According to the first policy, risks without compensating controls will be mitigated first if the risk value is greater than $50,000. Risk C has no compensating controls and a risk value of $75,000, so it is the highest priority. Risk B also has no compensating controls, but a risk value of $40,000, so it is the second priority. According to the second policy, other risk mitigation will be prioritized based on risk value. Risk A has a risk value of $60,000 and a compensating control of encryption, so it is the third priority. Risk D has a risk value of $50,000 and a compensating control of backup power supply, so it is the lowest priority.

"Technical controls enforce confidentiality, integrity, and availability in the digital space. Examples of technical security controls include firewall rules, access control lists, intrusion prevention systems, and encryption." A technical control is a type of control that uses technology or software to protect data and systems from unauthorized access or misuse3. A technical control can include encryption, authentication, firewalls, antivirus software, and other mechanisms that rely on hardware or software. Placing an ACL (access control list) on a file folder is an example of a technical control. An ACL is a list of permissions that specifies who can access or modify a file or folder4. An ACL can help to enforce confidentiality, integrity, and availability of data by restricting access to authorized users only.

https://www.techtarget.com/searchsecurity/definition/data-masking
Masking is a technique that involves replacing or hiding some parts of sensitive information with symbols or characters, such as asterisks (*) or Xs. Masking can help safeguard the confidentiality of sensitive information while allowing limited access to authorized individuals, because it obscures the original data without altering its format or structure. For example, masking can be used to hide some digits of a credit card number or a social security number. Deidentification, hashing, or salting are other techniques that involve transforming or modifying sensitive information, but they do not allow limited access to authorized individuals. Reference: https://www.ibm.com/docs/en/ims/14.1?topic=masking-data