A.The business need for the function

B.The vendor's reputation m the industry

C.The ability to meet deliverables

D.The cost of the services

A.Revise the information security strategy to meet executive management expectations.

B.Report the risk and status of the information security program to the board.

C.Escalate noncompliance concerns to the internal audit manager

D.Demonstrate alignment of the information security function with business needs.

A.managing risks of new technologies

B.requiring accreditation for new technologies.

C.defining policies for new technologies.

D.enabling adoption of new Technologies.

A.Increasing the frequency of control assessments

B.Providing organizational training on information security policies

C.Increasing budget for risk assessments

D.Establishing an information security steering committee

A.Knowledge sharing and collaboration

B.Forensic analysis

C.Security event logging

D.Roles and responsibilities