A.inherent risk Is unchanged.

B.Residual risk is reduced.

C.Fewer security incidents have been reported.

D.The number of audit findings has decreased.

A.Capability maturity models integrated with risk management frameworks

B.Mapping of key risk indicators (KRIs) to corporate strategy

C.Robust organizational communication channels

D.Rigorously enforced operational service level agreements (SLAs)

A.require the vendor to sign a nondisclosure agreement

B.clearly define the project scope.

C.perform background checks on the vendor.

D.notify network administrators before testing

A.the control eliminates the risk

B.the mitigation measures create compounding effects

C.there are sufficient internal resources to implement the control

D.the cost of control exceeds the mitigation value

A.operates efficiently.

B.meets regulatory requirements.

C.operates as intended.

D.is being monitored.