A.Corporate incident escalation protocols are established.

B.Risk appetite cascades to business unit management

C.Exposure is integrated into the organization's risk profile.

D.The organization-wide control budget is expanded.

A.Comparison against regulations

B.Cost of risk mitigation options

C.Maturity of the risk culture

D.Capacity to withstand loss

A.Test and production programs are in distinct libraries.

B.Only operations personnel are authorized to access production libraries.

C.The programming project leader solely reviews test results before approving the transfer to production.

D.A synchronized migration of executable and source code from the test environment to the production environment is allowed.

A.Escalate to senior management.

B.Implement monitoring controls.

C.Recalculate the risk.

D.Transfer the risk.

A.Risk aggregation

B.Risk monitoring

C.Risk assessment

D.Risk mitigation