A.initiate corrective action to address the known deficiency

B.keep monitoring the situation as there is evidence that this is normal

C.inquire about the status of any planned corrective actions

D.adjust the risk threshold to better reflect actual performance

A.Listing alternative causes for risk events

B.Monitoring the risk until the exposure is reduced

C.Illustrating changes in risk trends

D.Setting minimum sample sizes to ensure accuracy

A.Information security policies

B.Information security standards

C.Key risk indicators (KRIs)

D.Documented procedures

A.Reassessing control effectiveness of the process

B.Conducting a post-implementation review to determine lessons learned

C.Reporting key performance indicators (KPIs) for core processes

D.Establishing escalation procedures for anomaly events

A.resources to monitor backups

B.backup recovery requests

C.recurring restore failures

D.restoration monitoring reports