An organization uses one centralized single sign-on (SSO) control to cover many applications. Which of the following is the BEST course of action when a new application is added to the environment after testing of the SSO control has been completed?

Which of the following is MOST important for a risk practitioner to consider when evaluating plans for changes to IT services?

The MAIN reason for prioritizing IT risk responses is to enable an organization to:

Which of the following BEST enables the risk profile to serve as an effective resource to support business objectives?

During an IT risk scenario review session, business executives question why they have been assigned ownership of IT-related risk scenarios. They feel IT risk is technical in nature and therefore should be owned by IT. Which of the following is the BEST way for the risk practitioner to address these concerns?