A.Percentage of business users completing risk training

B.Number of key risk indicators (KRIs) defined

C.Percentage of high-risk scenarios for which risk action plans have been developed

D.Time between when IT risk scenarios are identified and the enterprise's response

A.high risk tolerance

B.corporate culture misalignment.

C.low risk tolerance

D.corporate culture alignment

A.Business impact analysis

B.Resource dependency analysis

C.Total cost of ownership

D.Cost-benefit analysis

A.results of the review are accurately reported to management.

B.identified findings are approved by the vendor.

C.identified findings are reviewed by the organization.

D.results of the review are validated by internal audit.

A.Contingency plan for residual risk

B.impact due to failure of control

C.Cost-benefit analysis of automation

D.Frequency of failure of control