A.Control owner

B.Risk owner

C.Data owner

D.System owner

A.Number of false positives detected over a period of time

B.Percentage of IT assets with current malware definitions

C.Frequency of anti-virus software updates

D.Number of alerts generated by the anti-virus software

A.End node

B.Root node

C.Event node

D.Decision node

E.Explanation:
The potential choices of risk based decisions are represented in decision tree analysis via.
Decision node, as decision nodes refers to the available choices.

F.is incorrect. Root nodes represent the start of a decision tree.

G.is incorrect. End nodes are the final outcomes of the entire decision tree framework,
especially in multilayered decision-making situations.

A.Activity logging and monitoring

B.Awareness training and background checks

C.Two-factor authentication

D.Periodic access review

A.A well-established risk management committee

B.A robust risk aggregation tool set

C.Well-documented and communicated escalation procedures

D.Clearly defined roles and responsibilities