An organization is unable to implement a multi-factor authentication requirement until the next fiscal year due to budget constraints. Consequently, a policy exception must be submitted. Which of the following is MOST important to include in the analysis of the exception?

A maturity model will BEST indicate:

Which of the following should be accountable for ensuring that media containing financial information are adequately destroyed per an organization's data disposal policy?

Which of the following provides the MOST important information to facilitate a risk response decision?

it was determined that replication of a critical database used by two business units failed. Which of the following should be of GREATEST concern1?