A.Perform root cause analysis.

B.Perform a risk assessment.

C.Initiate disciplinary action.

D.Update the incident response plan.

A.Identification of key risk indicators

B.Involvement of internal audit

C.Quantitative impact of the risk

D.Involvement of process owner

A.Business process owner

B.Chief information security officer (CISO)

C.Key control owner

D.Operational risk manager

A.The scenarios are aligned with risk management capabilities.

B.The scenarios are based on past incidents.

C.The scenarios are linked to probable organizational situations.

D.The scenarios are mapped to incident management capabilities.

A.control requirements.

B.capability to implement new processes

C.degree of compliance with policies and procedures

D.evolution of process improvements