A. evaluate whether selected controls are still appropriate.

B. implement the planned controls and accept the remaining risk.

C. suspend the current action plan in order to reassess the risk.

D. revise the action plan to include additional mitigating controls.

A. Time required for backup restoration testing.

B. Change in size of data backed up.

C. Successful completion of backup operations.

D. Percentage of failed restore tests.

A. Risk and control ownership

B. Risk response plans

C. Impact and likelihood ratings

D. Key controls

A. Detective

B. Corrective

C. Preventative

D. Recovery

E. Explanation:
An intrusion detection system (IDS) is a device or software application that monitors network and/or system activities for malicious activities or policy violations and produces reports to a Management Station. Some systems may attempt to stop an intrusion attempt but this is neither required nor expected of a monitoring system. Intrusion detection and prevention systems (IDPS) are primarily focused on identifying possible incidents, logging information about them, and reporting attempts. In addition, organizations use IDPS for other purposes,such as identifying problems with security policies, documenting existing threats, and deterring individuals from violating security policies. As IDS detects and gives warning when the violation of security policies of the enterprise occurs, it is a detective control.

A. Activity duration estimates

B. Risk management plan

C. Cost management plan

D. Activity cost estimates

E. Explanation:
The activity cost estimates review is valuable in identifying risks as it provides a quantitative assessment of the expected cost to complete the scheduled activities and is expressed as a range, with a width of the range indicating the degrees of risk.