A.ensure that the source code is available if the vendor ceases to exist.

B.ensure that the source code is valid and exists.

C.review the source code for adequacy of controls.

D.ensure the source code is available when bugs occur.

A.A risk and control self-assessment

B.Senior management's attestation

C.detailed process walk-through

D.A system-generated testing report

A.validating the risk scenarios

B.identifying risk mitigation controls.

C.documenting the risk scenarios.

D.updating the risk register

A.Continuous monitoring of threats and vulnerabilities

B.Implementation of proper controls

C.User awareness of policies and procedures

D.Senior management support

A.benchmarking criteria.

B.suppliers used by the organization.

C.stakeholder risk tolerance.

D.the control environment.