Which of the following is the BEST indicator of executive management's support for IT risk mitigation efforts?

Quantifying the value of a single asset helps the organization to understand the:

Several network user accounts were recently created without the required management approvals. Which of the following would be the risk practitioner's BEST recommendation to address this situation?

Which of the following is MOST important for an organization that wants to reduce IT operational risk?

Which of the following should be of GREATEST concern when reviewing the results of an independent control assessment to determine the effectiveness of a vendor's control environment?