Establishing an organizational code of conduct is an example of which type of control?

When developing a new risk register, a risk practitioner should focus on which of the following risk management activities?

You have been assigned as the Project Manager for a new project that involves building of a new roadway between the city airport to a designated point within the city. However, you notice that the transportation permit issuing authority is taking longer than the planned time to issue the permit to begin construction. What would you classify this as?

Following a significant change to a business process, a risk practitioner believes the associated risk has been reduced. The risk practitioner should advise the risk owner to FIRST:

Which of the following BEST enforces access control for an organization that uses multiple cloud technologies?