What would be an information security manager's BEST course of action when notified that the implementation of some security controls is being delayed due to budget constraints?

Which of the following is the MOST effective way to communicate information security risk to senior management?

Management has announced the acquisition of a new company. The information security manager of parent company is concerned that conflicting access rights may cause critical information to be exposed during the integration of the two companies.
To BEST address this concern, the information security manager should:

What is the MAIN reason for an organization to develop an incident response plan?
Identify training requirements for the incident response team.
Priorities treatment based on incident critically.
What is the MAIN reason for an organization to develop an incident response plan?

Which of the following techniques is MOST useful when an incident response team needs to respond to external attacks on multiple corporate network devices?