An organization needs to better understand whether one of its key business processes is effective. What action should the organization consider?

A. Audit the process

B. Benchmark the process

C. Outsource the process

D. offshore the process

An organization has chosen to open a business office in another country where labor costs are lower and has hired workers to perform business functions the.re. This organization has:

A. Outsourced the function

B. Outsourced the function offshore

C. Insourced the function on-site

D. insourced the function at a remote location

A quantitative risk analysis is more difficult to perform because:

A. It is difficult to get accurate figures on on he impact of a realized threat.

B. It is difficult to get accurate figures on the frequency of specific threats.

C. It is difficult to get accurate figures on the value of assets.

D. It is difficult to calculate the annualized loss expectancy of a specific threat.