A.Risk planning

B.Risk monitoring and controlling

C.Risk identification

D.Risk analysis

E.Explanation:
The risk monitoring and controlling is responsible for identifying new risks, determining the status
of risks that may have changed, and determining which risks may be outdated in the project.

F.is incorrect. Risk identification is a process that identifies risk events in the project.

G.is incorrect. Risk planning creates the risk management plan and determines how risks
will be identified, analyzed, monitored and controlled, and responded to.

A.Cost-benefit analysis

B.Control objectives

C.Risk tolerance

D.Incident reports

A.acceptance of exposures

B.deployment of counter measures.

C.buying an insurance policy.

D.enterprise architecture implementation.

A.authorized to select risk mitigation options.

B.independent from the business operations.

C.accountable for the affected processes.

D.members of senior management.

A.Entitlement reviews

B.Role-based access controls

C.User provisioning

D.Security log monitoring