A.Security training for systems development staff

B.\Well-documented business cases

C.Secure coding practices

D.Security architecture principles

A.Course evaluation

B.User behavior after training

C.User self-assessment

D.Quality of training materials

A.The add new controls to mitigate the risk

B.The recommend changes to the IoT policy

C.To confirm the impact to the risk profile

D.To reevaluate continued use to IoT devices

A.as input foe decision-making

B.for compliance with laws and regulations

C.to measure organizational success.

D.as a basis for cost-benefit analysis.

A.Conduct a tabletop exercise

B.Conduct interviews with key stakeholders

C.Conduct a disaster recovery exercise

D.Conduct a full functional exercise