A.Accuracy of risk tolerance levels

B.Participation of stakeholders

C.Maturity of the process

D.Consistency of risk process results

A.Service interruptions may be longer than anticipated.

B.Recovery costs may increase significantly.

C.External resources may need to be involved.

D.Data privacy regulations may be violated.

A.agreement is obtained from stakeholders.

B.operators are unaware of the test.

C.external experts execute the test.

D.tests are conducted after business hours.

A.Conduct a threat analysis.

B.Review security logs.

C.Perform a penetration test.

D.Perform a root cause analysis.

A.KCIs provide input for KRIs

B.KCIs and KRIs help in determining risk appetite.

C.KCIs are defined using data from KRIs.

D.KCIs are independent from KRIs KRIs.