A.incentive and capability of the intruder

B.opportunity and asset value

C.threat and vulnerability levels

D.value and desirability to the intruder

A.Projected increase in maturity level

B.Estimated increase in efficiency

C.Projected costs over time

D.Estimated reduction in risk

A.Review the service providers' information security policies and procedures.

B.Conduct regular vulnerability assessments on the service providers' IT systems.

C.Provide information security awareness training to service provider staff.

D.Perform regular audits on the service providers' applicable controls.

A.using multiple classifications for each impact

B.depending on the method used to spread

C.each time the exposure is experienced

D.at the highest potential level of business impact

A.Web site hosting

B.Application development

C.Virtual private network (VPN) services

D.Enterprise infrastructure