A.Operational risk managers

B.Internal auditors

C.Information security managers

D.Business process owners

A.Post-implementation reviews of program changes

B.Security log monitoring

C.Problem management

D.Recovery testing

E.Explanation:
Security log monitoring, Post-implementation reviews of program changes, and Problem management provide indirect information. Security log monitoring provide indirect information about certain controls in the security environment, particularly when used to analyze the source of failed access attempts. Post-implementation reviews of program changes provide indirect information about the effectiveness of internal controls over the development process. Problem management provide indirect information about the effectiveness of several different IS processes that may ultimately be determined to be the source of incidents.

A.profile.

B.strategy

C.map

D.process.

A.Weaknesses

B.Tools

C.Threats

D.Opportunities

E.Strengths

F.Explanation:
SWOT analysis is a strategic planning method used to evaluate the Strengths, Weaknesses, Opportunities, and Threats involved in a project or in a business venture. It involves specifying the objective of the business venture or project and identifying the internal and external factors that are favorable and unfavorable to achieving that objective. The technique is credited to Albert Humphrey, who led a research project at Stanford University in the 1960s and 1970s using data from Fortune 500 companies.

A.Redundant compensating controls are in place.

B.Asset custodians are responsible for defining controls instead of asset owners.

C.A high number of approved exceptions exist with compensating controls.

D.Successive assessments have the same recurring vulnerabilities.