A.To continuously improve risk management processes

B.To build an organizational risk-aware culture

C.To identify gaps in risk management practices

D.To comply with legal and regulatory requirements

A.List of key risk indicators

B.Internal audit reports

C.IT risk register

D.List of approved projects

A.security controls are tested prior to implementation.

B.compliance with corporate policies.

C.the proposed controls are implemented as scheduled.

D.the risk response strategy has been decided.

A.Risk Treatment

B.Control

C.Risk Assessment

D.Risk Management

E.Explanation:
The process for selecting and implementing measures for impacting risk in the environment is
called risk treatment.

F.is incorrect. Risk management is the coordinated activities for directing and controlling
the treatment of risk in the organization.

A.minimum tolerable downtime

B.maximum tolerable loss of data

C.maximum tolerable downtime.

D.minimum tolerable loss of data.