A.Encrypted storage of data

B.Links to source data

C.Check totals on data records and data fields

D.Audit trails for updates and deletions

A.Assess the goals and culture of the organization.

B.Collect data of past incidents and lessons learned.

C.Identify the risk appetite of the organization.

D.Conduct a high-level risk assessment based on the nature of business.

A.Access reviews

B.Internal audit reports

C.Threat modeling

D.Root cause analysis

A.ensure that the source code is valid and exists.

B.review the source code for adequacy of controls.

C.ensure that the source code is available if the vendor ceases to exist.

D.ensure the source code is available when bugs occur.

A.To communicate the level and priority of assessed risk to management

B.To enable the creation of action plans to address nsk

C.To assign a risk owner to manage the risk

D.To provide a comprehensive inventory of risk across the organization