A.Identifying the victim of any potential exploits.

B.Finding economic balance between the impact of the risk and the cost of the control

C.Assessing the impact of potential threats

D.Identifying the risk

A.Unable to control physical access to the servers

B.Unable to track log on activity

C.Unable to patch systems as needed

D.Unable to run anti-virus scans

A.Threat analysis process

B.Disaster Recovery plan

C.Asset configuration management process

D.Business Impact Analysis

A.Assigning value to each information asset

B.Calculating the risks to which assets are exposed in their current setting

C.Classifying and organizing information assets into meaningful groups

D.Creating an inventory of information assets

A.Real-time to remediate

B.Security budget augmentation

C.Security control selection

D.Process improvements