A. There is an understanding that risk is important and needs to be managed, but it is viewed as a technical issue and the business primarily considers the downside of IT risk

B. Decisions involving risk lack credible information

C. Risk appetite and tolerance are applied only during episodic risk assessments

D. Risk management skills exist on an ad hoc basis, but are not actively developed

E. Explanation:
The enterprise with risk management capability maturity level 0 makes decisions without having
much knowledge about the risk credible information. In level 1, enterprise takes decisions on the
basis of risk credible information.

A. To optimize risk management resources across the organization

B. To ensure risk profiles are presented in a consistent format within the organization

C. To have a unified approach to risk management across the organization

D. To have a standard risk management process for complying with regulations

A. Conduct interviews with key stakeholders.

B. Conduct a tabletop exercise.

C. Conduct a full functional exercise.

D. Conduct a disaster recovery exercise.

A. 변경 없이 구현을 계속합니다.

B. 향상된 암호 소프트웨어 루틴을 개발합니다.

C. 정책 예외에 대한 관리 승인을 얻습니다.

D. 강력한 암호 제어 기능이 있는 다른 응용 프로그램을 선택하십시오.

A. Confidentiality

B. Availability

C. Reliability

D. Integrity