A.Enforcing segregation of dunes

B.Conducting phishing exercises

C.Enforcing employees sanctions

D.Reviewing the organization's risk appetite

A.map the business processes to supporting IT and other corporate resources.

B.identify critical business processes and the degree of reliance on support services.

C.document the disaster recovery process.

D.obtain the support of executive management.

A.Maturity of the risk management program

B.Time available for risk analysis

C.Resources available for data analysis

D.Expertise in both methodologies

A.Utilizing antivirus systems and firewalls

B.Conducting regular penetration tests

C.Implementing automated log monitoring

D.Monitoring social media activities

A.Monitoring the results of actions taken to mitigate fraud

B.Implementing processes to detect and deter fraud

C.Ensuring that risk and control assessments consider fraud

D.Providing oversight of risk management processes