A.Data owner

B.Risk manager

C.Risk owner

D.Business manager

A.reflect the results of risk assessments.

B.effectively support a business maturity model.

C.be available to operational risk groups.

D.be reviewed by the IT steering committee.

A.IT risk practitioner

B.The relationship owner

C.Third -partf3ecurity team

D.Legal representation of the business

A.validating the risk scenarios

B.documenting the risk scenarios.

C.identifying risk mitigation controls.

D.updating the risk register

A.Testing controls periodically

B.Automating manual controls

C.Responding promptly to control exceptions

D.Implementing compensating controls