A.Threat type

B.Risk appetite

C.Risk tolerance

D.Residual risk

A.Key control indicators (KCIs)

B.Key performance indicators (KPIs)

C.Key risk indicators (KRIs)

D.Key management indicators (KMIs)

A.Verbal majority acceptance of risk by committee

B.A memo indicating risk acceptance

C.List of compensating controls

D.IT audit follow-up responses

A.The organizations risk appetite and tolerance

B.The organization's strategic risk management projects

C.Senior management roles and responsibilities

D.Senior management allocation of risk management resources

A.IT system owner

B.Chief financial officer

C.Business process owner

D.Chief risk officer