A. Configuration management

B. Continuous monitoring and alerting

C. Access controls and active logging

D. Vulnerability scanning

A. 프로그래머가 코드를 작성하고 프로덕션으로 승격합니다.

B. 사용자가 구현 후 변경 사항을 승인하고 모니터링합니다.

C. 사용자가 프로덕션 전에 변경 사항을 요청하고 테스트합니다.

D. 프로그래머가 생산 전에 변경 사항을 요청하고 테스트합니다.

A. 상향식 접근 방식

B. 인과관계도

C. 하향식 접근 방식

D. 델파이 기법

A. Promote and support consistent performance in risk management

B. Promote fair and open communication

C. Focus on enterprise's objective

D. Balance the costs and benefits of managing risk

E. Explanation:
The primary function of the enterprise is to meet its objective. Each business activity for fulfilling
enterprise's objective carries both risk and opportunity, therefore objective should be considered
while managing risk.
Open and fair communication should me there for effective risk management. Open, accurate,
timely and transparent information on lT risk is exchanged and serves as the basis for all risk-
related decisions.
Cost-benefit analysis should be done for proper weighing the total costs expected against the total
benefits expected, which is the major aspect of risk management.

A. Define the business requirements for the management of data by IT

B. Conduct IT continuity tests on a regular basis or when there are major changes in the IT infrastructure

C. Periodically identify critical data that affect business operations

D. Establish an independent test task force that keeps track of all events

E. Explanation:
Business alignment require following control activities:
Defining the business requirements for the management of data by IT.
Periodically identifying critical data that affect business operations, in alignment with the risk
management model and IT service as well as the business continuity plan.

F. is incorrect. Conducting IT continuity tests on a regular basis or when there are major
changes in the IT infrastructure is done for testing IT continuity plan. It does not ensure alignment
with business.