A.Perform a self-assessment.

B.Engage a third-party review.

C.Evaluate key performance indicators (KPls).

D.Review internal audit results.

A.Ensuring residual risk is within apbetite

B.Ensuring the application inventory is updated

C.Ensuring senior management is aware of associated risk

D.Ensuring a cost-benefit analysis is completed

A.assign personnel-specific duties in the recovery plan.

B.include end-user personnel in each recovery test.

C.have the most experienced personnel participate in recovery tests.

D.periodically rotate recovery-test participants.

A.Assess the business impact.

B.Implement security measures to reduce the risk.

C.Communicate the information to senior management.

D.Transfer the risk to third parties.

A.the number of security incidents.

B.changes in regulatory requirements.

C.changes in business processes.

D.business continuity plan (BCP) testing.