A.give the business a measure of the organization's overall readiness.

B.challenge the incident response team to solve the problem under pressure.

C.provide participants with situations to ensure understanding of their roles.

D.measure management engagement as part of an incident response team.

A.Revise the business continuity plan (BCP)

B.Update the current risk register

C.Reassess management's risk appetite

D.Conduct a gap analysis

A.Aligning procedures with industry best practices

B.Conducting an external benchmarking exercise

C.Classifying the information assets to be protected

D.Considering the impact of systemic risk events

A.Audit reports

B.Updated risk assessments

C.Monthly metrics

D.Counts of information security incidents

A.Identify secure social networking sites

B.Define acceptable information for posting

C.Establish disciplinary actions for noncompliance

D.Perform a vulnerability assessment