A.To establish and maintain a control inventory

B.To facilitate ongoing audit and control testing

C.To increase the likelihood of effective control operation

D.To help manage risk to acceptable tolerance levels

A.create new control processes to reduce identified IT risk scenarios

B.report identified IT risk scenarios to senior management

C.confirm the organization s risk appetite and tolerance

D.review alignment with the organization's investment plan

A.Percentage of IT assets without ownership

B.The number of IT assets procured during the previous month

C.Percentage of unpatched IT assets

D.The number of IT assets securely disposed during the past year

A.improving the effectiveness of IT controls.

B.increasing participation in the risk assessment process.

C.assisting the development of a risk register.

D.helping personnel make better-informed decisions

A.Code of ethics training for all employees

B.A centralized computer security response team

C.Communication of employee activity monitoring

D.Regular performance reviews and management check-ins