A.Variance of program cost to allocated budget

B.Mean time between incident detection and remediation

C.The number of security breaches

D.The number of reported security incidents

A.Backup strategy

B.Security awareness training

C.Intrusion detection system (IDS)

D.Antivirus software

A.Identifying critical information assets

B.Promoting increased security awareness in the organization

C.Identifying and eliminating threats

D.Assigning the appropriate level of protection

A.Risk prioritization

B.Cross-training

C.Risk avoidance

D.Threat management

A.To facilitate the classification of an organization's IT assets

B.To prioritize available incident response resources

C.To streamline the risk analysis process

D.To facilitate root cause analysis of incidents