A.Implementing change-control practices

B.Logging of security events

C.Providing dynamic address assignment

D.Placing the firewall on a screened subnet

A.Information security strategy

B.Business case

C.Quantitative risk analysis report

D.Security balanced scorecard

A.supports access management.

B.simplifies development of the security awareness program.

C.aligns security to the human resources function.

D.strengthens employee accountability.

A.Determination of the residual risk value

B.Support for the incident response process

C.Reduction in the annual loss expectancy (ALE)

D.Ability to analyze risk trends

A.senior management buy-in

B.Insurance valuation is appropriate.

C.proper access control

D.proper ownership is established