A.Senior management approval has been documented.

B.Each process is assigned to a responsible party.

C.The contact list regularly updated.

D.Minimum regulatory requirements are maintained.

A.Organizational standards are enforced by technical controls.

B.Organizational standards are included in awareness training.

C.Organizational standards are documented in operational procedures.

D.Organizational standards are required to be formally accepted.

A.if a robust IT infrastructure exists.

B.by the use of a remote access server.

C.on a need-to-know basis subject to controls.

D.subject to legal and regulatory requirements.

A.Results of a risk assessment

B.Impact on the risk profile

C.Results of a cost-benefit analysis

D.Senior management support

A.a business impact analysis (BIA).

B.regulatory requirements.

C.a vulnerability assessment.

D.business risk scenarios.