Which of the following is the BEST way to confirm whether appropriate automated controls are in place within a recently implemented system?

An organization with a large number of applications wants to establish a security risk assessment program. Which of the following would provide the MOST useful information when determining the frequency of risk assessments?

Which of the following criteria associated with key risk indicators (KRIs) BEST enables effective risk monitoring?

In an organization where each division manages risk independently, which of the following would BEST enable management of risk at the enterprise level?

Sensitive data has been lost after an employee inadvertently removed a file from the premises, in violation of organizational policy. Which of the following controls MOST likely failed?