A.Risk assessment results

B.Industry benchmarks

C.Key performance indicators (KPIs)

D.Business impact analysis (BIA) results

A.Reduction in the amount of risk exposure in an organization

B.Reduction in the number of threats to an organization

C.Reduction in the cost of risk remediation for an organization

D.Reduction in the number of vulnerabilities in an organization

A.Key control indicators (KCIs)

B.Key performance indicators (KPIs)

C.Key risk indicators (KRIs)

D.Key goal indicators (KGIs)

A.Criteria for escalating to the BCP manager are in the incident response plan.

B.Consistent event classifications are used in both plans.

C.The BCP manager is included in the core incident response team.

D.Both response teams contain the same members.

A.Conducting a tabletop exercise

B.Performing a penetration test

C.Reviewing previous audit reports

D.Benchmarking the plan against best practices