A deficient control has been identified which could result in great harm to an organization should a low frequency threat event occur. When communicating the associated risk to senior management the risk practitioner should explain:

Which of the following is MOST likely to introduce risk for financial institutions that use blockchain?

Performing a background check on a new employee candidate before hiring is an example of what type of control?

When prioritizing risk response, management should FIRST:

Which of the following should be the PRIMARY recipient of reports showing the progress of a current IT risk mitigation project?