A.Each business location has separate, inconsistent BCPs.

B.Recovery time objectives (RTOs) do not meet business requirements.

C.BCP is often tested using the walk-through method.

D.BCP testing is net in conjunction with the disaster recovery plan (DRP)

A.Avoiding risks that could materialize into substantial losses

B.Increasing organizational resources to mitigate risks

C.Defining expectations in the enterprise risk policy

D.Communicating external audit results

A.can implement remediation action plans.

B.is accountable for loss if the risk materializes.

C.is responsible for enterprise risk management (ERM)

D.is in charge of information security.

A.5

B.7

C.1

D.4

E.Explanation:
Four risk response options are there to deal with negative risks or threats on the project objectives- avoid, transfer, mitigate, and accept. Risk avoidance Risk mitigation Risk transfer Risk acceptance

A.Key control owner

B.Chief information security officer (CISO)

C.Operational risk manager

D.Business process owner