A.Risk scenario summary

B.Business impact analysis (BIA)

C.Balanced scorecard

D.Risk heat map

A.benchmarking the security programs of comparable organizations.

B.identifying the risks and consequences of failure to comply with standards.

C.informing management about the security of business operations.

D.implementing a comprehensive security awareness and training program.

A.At intervals indicated by industry best practice

B.When missing information impacts recovery from an incident

C.When recovery time objectives (RTOs) are not met

D.Before an internal audit of the incident response process

A.Organizational structure

B.Owners of the information

C.Data format

D.Value of the information

A.To ensure management is accurately informed

B.To approve data breach notifications

C.To assign appropriate prioritization levels

D.To obtain funds for external forensic support