An identified high probability risk scenario involving a critical, proprietary business function has an annualized cost of control higher than the annual loss expectancy. Which of the following is the BEST risk response?

When preparing a risk status report for periodic review by senior management, it is MOST important to ensure the report includes

Which of the following will BEST ensure that information security risk factors are mitigated when developing in-house applications?

From a risk management perspective, which of the following is the PRIMARY benefit of using automated system configuration validation tools?

An organization has granted a vendor access to its data in order to analyze customer behavior. Which of the following would be the MOST effective control to mitigate the risk of customer data leakage?