Which of the following should be the FIRST consideration when a business unit wants to use personal information for a purpose other than for which it was originally collected?

Which of the following is the BEST approach for performing a business impact analysis (BIA) of a supply-chain management application?

Which of the following is the BEST way to detect zero-day malware on an end user's workstation?

Which of the following would be the BEST recommendation if the level of risk in the IT risk profile has decreased and is now below management's risk appetite?

Which of the following would be a risk practitioner's BEST recommendation upon learning of an updated cybersecurity regulation that could impact the organization?