A.security controls are updated regularly.

B.risks have been evaluated.

C.potential vulnerabilities are identified.

D.security controls drive technology changes.

A.Restore the compromised system.

B.Identify the malware that compromised the system.

C.Implement improvements to prevent recurrence.

D.Preserve incident-related data.

A.the desired range of security settings

B.a standard of acceptable settings

C.the organization's preferred security level.

D.a framework of operational standards

A.ensure that the team can respond to any incident

B.remove the need to involve senior managers in the response process.

C.enable the team to develop effective response interactions.

D.provide the team with practical experience in responding to incidents.

A.An analysis of the impact of this type of control weakness on other organizations

B.The impact of the control weakness on the risk profile of the organization

C.The results of a business impact analysis (BIA)

D.A business case for implementing stronger authentication controls