A.a management request for updated security reports.

B.resistance to the implementation of mitigating controls.

C.a change in security policy.

D.a change in the threat landscape.

A.The risk is justified by the cost to security.

B.The risk is justified by the benefit to security.

C.The risk is justified by the benefit to the business.

D.The risk is justified by the cost to the business.

A.Details from intrusion detection system (IDS) logs

B.Cost of the attack to the organization

C.Location of the attacker

D.Method of operation used by the attacker

A.To facilitate a qualitative risk assessment following the BIA

B.To ensure the stakeholders providing input own the related risk

C.To increase awareness of information security among key stakeholders

D.To obtain input from as many relevant stakeholders as possible

A.Periodic updates to risk register

B.Security information and event management (SIEM) systems

C.Vulnerability assessment results

D.Risk management dashboards