A.Risk tolerance

B.Risk monitoring

C.Risk treatment

D.Threat identification

A.To remediate half of the findings before the next audit.

B.To remediate all of the findings before the next audit.

C.To validate that the cost of the remediation is less than the risk of the finding.

D.To validate the remediation process with the auditor.

A.Perform an audit to measure the control formally

B.Establish Key Risk Indicators

C.Escalate the issue to the IT organization

D.Perform a risk assessment to measure risk

A.Lack of notification to the public of disclosure of confidential information

B.Failure to notify police of an attempted intrusion

C.Lack of reporting of a successful denial of service attack on the network.

D.Lack of notification to the public of disclosure of confidential information

A.The IT team is not certified to perform audits

B.This represents a bad implementation of the Least Privilege principle

C.The IT team is not familiar in IT audit practices

D.This represents a conflict of interest