Which of the following BEST indicates the risk appetite and tolerance level (or the risk associated with business interruption caused by IT system failures?

Which of the following should be a risk practitioner's NEXT action after identifying a high probability of data loss in a system?

A segregation of duties control was found to be ineffective because it did not account for all applicable functions when evaluating access. Who is responsible for ensuring the control is designed to effectively address risk?

Which of the following is the PRIMARY reason for sharing risk assessment reports with senior stakeholders?

The PRIMARY purpose of using a framework for risk analysis is to: