IT stakeholders have asked a risk practitioner for IT risk profile reports associated with specific departments to allocate resources for risk mitigation. The BEST way to address this request would be to use:

In an organization where each division manages risk independently, which of the following would BEST enable management of risk at the enterprise level?

A company has located its computer center on a moderate earthquake fault. Which of the following is the MOST important consideration when establishing a contingency plan and an alternate processing site?

Which of the following is the PRIMARY reason for an organization to ensure the risk register is updated regularly?

Which of the following should be the HIGHEST priority when developing a risk response?