A.To ensure regulatory compliance

B.To review lessons learned

C.To determine the level of required remediation

D.To establish the cost of remediation

A.Implementing key risk indicators (KRIs)

B.Conducting a business impact analysis (BIA)

C.Implementing key performance indicators (KPIs)

D.Developing additional mitigating controls

A.Perform a cost-benefit analysis of using cloud services.

B.Review the cloud service providers" controls reports.

C.Perform a risk assessment of adopting cloud services.

D.Conduct a security audit on the cloud service providers.

A.Implementing a data classification schema

B.Enforcing service level agreements (SLAs)

C.Utilizing a formal change management process

D.Ensuring encryption for data in transit

A.Reeducating end users on creating strong, complex passwords

B.Implementing a centralized identity management system

C.Conducting password strength testing

D.Implementing technical password controls to include strong complexity