A.Enhanced threat detection capability

B.Reduction of organizational risk

C.Enhanced security monitoring and reporting

D.Reduced control complexity

A.Simulating realistic test scenarios

B.Reviewing test results quarterly

C.Including all business units in testing

D.Testing after major business changes

A.Evaluating vendors critical to business recovery

B.Calculating residual risk after the incident recovery phase

C.Determining total cost of ownership (TCO)

D.Assigning restoration priority during incidents

A.Implementing a honeypot environment

B.Implementing proactive systems monitoring

C.Updating information security awareness materials

D.Providing ongoing training to the incident response team

A.A security steering committee including IT representation

B.A consistent risk management approach

C.An information security risk register

D.Integration of security reporting into corporate reporting