1 and 2 only

2 and 4 only

1, 2, and 4

2, 3, and 4

Conduct a risk assessment regarding the effectiveness of the data analytics process.

Analyze possible and available sources of raw data

Define the purpose and the anticipated value

Select data for cleaning and normalization procedures.

Standards, framework, and process.

Standards, assessments, and process.

Principles, framework, and process.

Principles, practices, and process.

The accounts payable supervisor, accounts payable manager, and controller.

The accounts payable manager, purchasing manager, and receiving manager.

The accounts payable supervisor, controller, and treasurer.

The accounts payable manager, chief financial officer, and audit committee.

Weak entrance barriers.

Significant scale economies.

Steep experience curve.

Strong negotiation power with suppliers.

Company A owns Company B; Company B sells goods to Company A.

Company A does not own Company B. Company A charges Company B a fee to sell Company B ' s goods without taking ownership of the goods.

Company A owns both Company B and Company C; all three companies sell goods to the public.

Company A moves goods internally from one location to another.

Creating a comprehensive reporting system for vendors to demonstrate their ongoing due diligence in network operations

Drafting a strong contract that requires regular vendor control reports and a right-to-audit clause.

Applying administrative privileges to ensure right-to-access controls are appropriate

Creating a standing cybersecurity committee to identify and manage risks related to data security

COBIT helps management understand and manage the risks associated with information technology (IT) processes.

Management needs to determine the cost-benefit ratio of adopting COBIT control objectives.

COBIT control objectives are specific to various IT platforms and help determine minimum controls.

COBIT provides management with the capability to conduct self-assessments against industry best practices.

Block unauthorized traffic.

Encrypt data.

Review disaster recovery test results.

Provide independent assessment of IT security.

Knowledge/skills gap

Monitoring gap

Accountability/reward failure.

Communication failure.

Review the list of people with access badges to the room containing the workstation and a log of those who accessed the room.

Review the password length, frequency of change, and list of users for the workstation ' s login process.

Review the list of people who attempted to access the workstation and failed, as well as error messages.

Review the passwords of those who attempted unsuccessfully to access the workstation and the log of their activity.

Contribution margin is the amount remaining from sales revenue after fixed expenses have been deducted.

Breakeven point is the amount of units sold to cover variable costs.

Breakeven occurs when the contribution margin covers fixed costs

Following breakeven, net operating income will increase by the excess of fixed costs less the variable costs per units sold

Reasonableness check.

Transaction log.

Input error correction.

Authorization for access.

Initiation stage

Bidding stage

Development stage

Negotiation stage

The amount of risk that an organization is willing to seek or accept.

The extent and degree of interdependency for identified key risks.

The boundaries established to manage the amount of risk taken.

The exposure to risks following management ' s risk responses.