A.the likelihood of a given threat.

B.the magnitude of an impact.

C.a function of the likelihood and impact.

D.a function of the cost and effectiveness of controls.

A.Business impact analysis (BIA)

B.Cost-benefit analysis

C.Root cause analysis

D.Attribute analysis

A.inform the IT manager of the concerns and propose measures to reduce them

B.inform the process owner of the concerns and propose measures to reduce them

C.inform the development team of the concerns, and together formulate risk reduction measures

D.recommend a program that minimizes the concerns of that production system

A.To promote awareness of the risk governance function.

B.To clarify fundamental risk management principles.

C.To enable risk-based decision making.

D.To ensure sufficient resources are available.

A.Information security director

B.Internal audit director

C.Chief information officer

D.Chief financial officer