A.Unauthorized access may be gained to multiple systems.

B.Security administration may become more complex.

C.User privilege changes may not be recorded.

D.User access may be restricted by additional security.

A.Risk thresholds

B.Business impact analysis (BIA) results

C.Risk scenario ownership

D.Possible causes of materialized risk

A.can be used to determine the indirect business impact.

B.uses qualitative risk rankings such as low. medium and high.

C.helps in calculating the expected cost of controls

D.can be used m a cost-benefit analysts

A.risk tolerance.

B.risk evaluation.

C.risk appetite.

D.risk mitigation.

A.Transfer

B.Mitigation

C.Acceptance

D.Avoidance