Which of The following should be of GREATEST concern for an organization considering the adoption of a bring your own device (BYOD) initiative?

A risk practitioner discovers several key documents detailing the design of a product currently in development have been posted on the Internet. What should be the risk practitioner's FIRST course of action?

An IT department has provided a shared drive for personnel to store information to which all employees have access. Which of the following parties is accountable for the risk of potential loss of confidential information?

Which of the following is the BEST approach to use when creating a comprehensive set of IT risk scenarios?

A business unit has decided to accept the risk of implementing an off-the-shelf, commercial software package that uses weak password controls. The BEST course of action would be to: