A.benchmark the organization's risk profile.

B.enable ongoing monitoring of emerging risk.

C.help an organization identify emerging threats.

D.identify trends in the organization's vulnerabilities.

A.IT risk scenarios are developed in the context of organizational objectives.

B.Key risk indicators (KRls) are developed for key IT risk scenarios

C.Risk appetites for IT risk scenarios are approved by key business stakeholders.

D.IT risk scenarios are assessed by the enterprise risk management team

A.Number of incidents lacking responses

B.Number of incidents escalated to management

C.Average time between changes and updating of escalation matrix

D.Average gap between actual and agreed response times

A.It compares performance levels of IT assets to value delivered.

B.It provides input to business managers when preparing a business case for new IT projects.

C.It facilitates the alignment of strategic IT objectives to business objectives.

D.It helps assess the effects of IT decisions on risk exposure.

A.revise the action plan to include additional mitigating controls.

B.implement the planned controls and accept the remaining risk.

C.evaluate whether selected controls are still appropriate.

D.suspend the current action plan in order to reassess the risk.