Which of the following is the MOST cost-effective way to test a business continuity plan?

Which of the following would BEST mitigate an identified risk scenario?

Legal and regulatory risk associated with business conducted over the Internet is driven by:

To define the risk management strategy which of the following MUST be set by the board of directors?

An organization's internal audit department is considering the implementation of robotics process automation (RPA) to automate certain continuous auditing tasks. Who would own the risk associated with ineffective design of the software bots?