A.assign risk ownership.

B.communicate risk to senior management.

C.facilitate internal audit.

D.determine the appropriate level of control.

A.Establishing a risk appetite

B.Identifying additional risk scenarios

C.Updating the heat map

D.Assessing loss expectancy

A.benchmark IT controls with Industry standards.

B.assist internal audit in evaluating and initiating remediation efforts.

C.ensure compliance with IT governance strategy.

D.facilitate the comparison of the current and desired states.

A.collaborate with management to meet compliance requirements.

B.modify internal assurance activities to include control validation.

C.identify necessary controls to ensure compliance.

D.conduct a gap analysis against compliance criteria.

A.Require annual end user policy acceptance.

B.Review awareness training assessment results

C.Survey device owners.

D.Rescan the user environment.