A.Risk appetite

B.Risk tolerance

C.Risk response

D.Risk magnitude

A.Implement a data masking process

B.Install a data loss prevention (DLP) tool

C.Include sanctions in nondisclosure agreements (NDAs)

D.Implement role-based access control

A.Update the risk register.

B.Implement compensating controls.

C.Activate the incident response plan.

D.Develop risk scenarios.

A.detect weaknesses that could lead to system compromise.

B.determine the impact of potential threats.

C.provide clear evidence that the system is sufficiently secure.

D.test intrusion detection systems (IDS) and response procedures.

A.To enable risk-based decision making

B.To ensure sufficient resources are available

C.To promote awareness of the risk governance function

D.To clarify fundamental risk management principles