What are options for control identification?

For a particular risk assessment methodology (RAM), the control effectiveness score is calculated based on an individual assessment of controls.

What are options for control identification? (Choose three.)
A . Controls are identified from library and ad-hoc
B. Controls are identified from indicator results
C. Controls are identified from library
D. Controls are identified ad-hoc
E. Controls are identified from related issues

View Answer

Answer: A,C,D