During an IT risk scenario review session, business executives question why they have been assigned ownership of IT-related risk scenarios. They feel IT risk is technical in nature and therefore should be owned by IT. Which of the following is the BEST way for the risk practitioner to address these concerns?

Which of the following would BEST help secure online financial transactions from improper users?

Which of the following BEST helps to balance the costs and benefits of managing IT risk?

Which of the following is MOST important to review when determining whether a potential IT service provider s control environment is effective?

Which of the following should be the MOST important consideration when performing a vendor risk assessment?