A.Vulnerability Assessment

B.Risk Assessment

C.Risk Management

D.System Testing

A.favorable audit findings

B.development of relationships with organization executives

C.following the recommendations of consultants and contractors

D.raising awareness of security issues with end users

A.The data custodian

B.The project manager

C.The asset owner

D.The asset manager

A.Ensure business units are involved in the creation of controls and defining conditions under which they must be applied

B.Provide the business units with control mandates and schedules of audits for compliance validation

C.Create separate controls for the business units based on the types of business and functions they perform

D.Allow the business units to decide which controls apply to their systems, such as the encryption of sensitive data

A.Risk acceptance

B.Risk tolerance

C.Risk mitigation

D.Risk transfer