A.Assigning a risk owner

B.Establishing risk metrics

C.Reporting on documented deficiencies

D.Training on risk management procedures

A.Application whitelisting

B.Email filtering

C.Security strategy training

D.Network encryption

A.based on employees' roles.

B.aligned to business processes.

C.focused on information security policy.

D.based on recent incidents.

A.Subscribe to a reputed threat intelligence group.

B.Assign staff to engage with social media hacking groups.

C.Implement vulnerability scanners.

D.Review alerts from a security information and event management (SIEM) system.

A.Mapping the scope of the incident on the network

B.Reviewing system logs and audit trails

C.Removing compromised systems from the network

D.Analyzing systems for impact from the incident