A.Conducting an impact analysis

B.Defining risk taxonomy

C.Defining risk response options

D.Identifying vulnerabilities

A.Validating employee social media accounts and passwords

B.Monitoring Internet usage on employee workstations

C.Disabling social media access from the organization's technology

D.Implementing training and awareness programs

A.Piloting courses with focus groups

B.Creating modules for targeted audiences

C.Reviewing content with senior management

D.Using reputable third-party training programs

A.Residual risk

B.Annual loss expectancy (ALE)

C.Cost of controls

D.Inherent risk

A.Perform periodic risk assessments.

B.Perform periodic IT control self-assessments.

C.Provide security awareness training.

D.Require a risk assessment with change requests.