A.Determine current and desired state of controls.

B.Execute a risk treatment plan.

C.Implement data regionalization controls.

D.Review contracts and statements of work (SOWs) with vendors.

A.Security standards

B.Security strategy

C.Security policies

D.Security awareness

A.Perform a risk assessment.

B.Reduce security hardening settings.

C.Document a security exception.

D.Inform business management of the risk.

A.Gathering evidence

B.Containing the incident

C.Eradicating the incident

D.Performing a risk assessment

A.System criticalities

B.Threat profiles

C.Vulnerability scores

D.Risk matrices