A.Replacement of the information security manager

B.Attainment of business process maturity

C.Engagement with a new service provider

D.Changes in the organization's risk appetite

A.Information security standards

B.Security audit reports

C.Benchmarking reports

D.Business requirements

A.an increased threat profile.

B.an increased risk profile.

C.a vulnerability management failure.

D.a security control failure.

A.Spread a site across multiple ISPs.

B.Harden network security.

C.Impose state limits on servers.

D.Block the attack at the source.

A.How well security risk is being managed

B.Whether security resources are adequately allocated

C.Whether controls are operating effectively

D.How well the security strategy is aligned with organizational objectives