A.accounts without documented approval

B.active accounts belonging to former personnel

C.user accounts with default passwords

D.accounts with dormant activity.

A.Implement corrective measures.

B.Create an IT security policy.

C.Implement detective controls.

D.Leverage existing technology

A.Contingency plan for residual risk

B.impact due to failure of control

C.Cost-benefit analysis of automation

D.Frequency of failure of control

A.Business impact analysis (BIA)

B.Risk register

C.Heat map

D.Balanced Scorecard

A.Extending the date of a future action plan by two months

B.Retiring a risk scenario no longer used

C.Changing a risk owner

D.Avoiding a risk that was previously accepted