An identified high probability risk scenario involving a critical, proprietary business function has an annualized cost of control higher than the annual loss expectancy. Which of the following is the BEST risk response?

The objective of aligning mitigating controls to risk appetite is to ensure that:

Which of the following would be MOST important for a risk practitioner to provide to the internal audit department during the audit planning process?

Which of the following is a detective control?

An organization is making significant changes to an application. At what point should the application risk profile be updated?