A.Security incidents are managed properly.

B.Security resources are optimized.

C.Security audit findings are reduced.

D.Security spending is below budget.

A.Purchasing insurance

B.Discontinuing the activity associated with the risk

C.Improving security controls

D.Performing a cost-benefit analysis

A.Gap analysis

B.Threat assessment

C.Impact analysis

D.Vulnerability assessment

A.Industry benchmarks

B.Stakeholder requirements

C.Risk register

D.Regulatory requirements

A.Performing frequent security reviews of the audit log

B.Conducting an annual security audit of the system

C.Providing security awareness training to accounting staff

D.Implementing two-factor authentication