A.Conducting a walk-through of the plan

B.Updating the plan periodically

C.Communicating the plan to all stakeholders.

D.Storing the plan at an offsite location

A.only as needed

B.only with management

C.only with internal audit

D.widely to demonstrate positive intent

A.Senior management acceptance of the access control software

B.A review of the number of key risk indicators (KRIs) implemented for the software

C.A business impact analysis (BIA) of the systems protected by the software

D.A comparison of security incidents before and after software installation

A.Seek legal counsel on the new regulation.

B.Monitor industry response to the regulation.

C.Validate the applicability of the regulation.

D.Escalate compliance risk to senior management

A.information about eradication activities.

B.hardware and software inventories.

C.criteria for activation.

D.data restoration procedures.