A systems interruption has been traced to a personal USB device plugged into the corporate network by an IT employee who bypassed internal control procedures. Of the following, who should be accountable?

As part of an overall IT risk management plan, an IT risk register BEST helps management:

The acceptance of control costs that exceed risk exposure is MOST likely an example of:

When reviewing a report on the performance of control processes, it is MOST important to verify whether the:

After a high-profile systems breach at an organization s key vendor, the vendor has implemented additional mitigating controls. The vendor has voluntarily shared the following set of assessments:
Which of the assessments provides the MOST reliable input to evaluate residual risk in the vendor's control environment?