A.Number of false positives defected over a period of time

B.Number of alerts generated by the anti-virus software

C.Percentage of IT assets with current malware definitions

D.Frequency of anti-vinjs software updates

A.Define the business requirements for the management of data by IT

B.Conduct IT continuity tests on a regular basis or when there are major changes in the IT infrastructure

C.Periodically identify critical data that affect business operations

D.Establish an independent test task force that keeps track of all events

E.Explanation:
Business alignment require following control activities:
Defining the business requirements for the management of data by IT.
Periodically identifying critical data that affect business operations, in alignment with the risk
management model and IT service as well as the business continuity plan.

F.is incorrect. Conducting IT continuity tests on a regular basis or when there are major
changes in the IT infrastructure is done for testing IT continuity plan. It does not ensure alignment
with business.

A.A review of the awareness program

B.A control self-assessment

C.Disciplinary action

D.Root cause analysis

A.Assess risk against business objectives.

B.Implement an organization-specific risk taxonomy.

C.Align business objectives to the risk profile.

D.Explain risk details to management.

A.risk register.

B.RACI matrix.

C.risk catalog.

D.risk scenario.