A.The capabilities of a security program in terms of staffing support

B.Significant risks and security incidents that have been discovered since the last assembly of the membership

C.System scanning trends and results as they pertain to insider and external threat sources

D.The numbers and types of cyberattacks experienced by the organization since the last assembly of the membership

A.assign the responsibility to the team responsible for the management of the controls.

B.perform an independent audit of the security controls.

C.assign the responsibility to the information security team.

D.create operational reports on the effectiveness of the controls.

A.Outsource compliance to a 3rd party vendor and let them manage the program.

B.Have Compliance and Information Security partner to correct issues as they arise.

C.Have Compliance direct Information Security to fix issues after the auditors report.

D.Only check compliance right before the auditors are scheduled to arrive onsite.

A.Reduction of liability and overall risk to the organization

B.Better vendor management

C.Reduction of security breaches

D.Senior management participation in the incident response process

A.To document the relationship between the company and the vendor

B.To establish a vendor selection process

C.To define the partnership for long-term success

D.To understand the risk coverage that are being mitigated by the vendor