Which of the following is the BEST control to detect an advanced persistent threat (APT)?

An organization operates in a jurisdiction where heavy fines are imposed for leakage of customer data. Which of the following provides the BEST input to assess the inherent risk impact?

An organization has decided to use an external auditor to review the control environment of an outsourced service provider. The BEST control criteria to evaluate the provider would be based on:

Which of the following is the MOST important consideration for a risk practitioner when making a system implementation go-live recommendation?

When developing risk treatment alternatives for a Business case, it is MOST helpful to show risk reduction based on: