A.Risk tolerance levels

B.Risk appetite statement

C.Risk response options

D.Process ownership

A.IT management policies and procedures.

B.defined roles and responsibilities.

C.business objectives of the organization.

D.system architecture in target areas.

A.Integrating the results of top-down risk scenario analyses

B.Introducing an approved IT governance framework

C.Performing a business impact analysis (BlA)

D.Implementing a risk classification system

A.Reconciling a list of accounts belonging to terminated employees

B.Reviewing for compliance with acceptable use policy

C.Reviewing access logs for user activity

D.Comparing the actual process with the documented process

A.Quantitative

B.Qualitative

C.Repeatable

D.Automated