A.Including sign-off from key stakeholders

B.Demonstrating the reduction in risk

C.Providing benchmark results from alternate vendors

D.Communicating the end-of-life support plan from vendor

A.Monthly reporting on new threats and vulnerabilities

B.Monthly reporting on the IT risk register

C.Monthly reporting on changes to the risk profile .

D.Monthly reporting on information security incidents.

A.Evaluate the cause of the control failure.

B.Classify the event depending on seventy and type.

C.Identify if there is a need for additional technical assistance.

D.Perform a risk assessment to determine the business impact.

A.Training staff on loT architecture

B.Managing the diversity of loT architecture

C.Evaluating the reputations of loT vendors

D.Updating policies to include loT devices

A.Independent controls assessment

B.Business continuity plans

C.Indemnity clauses

D.Incident response plans