Please dont answer the question unless you are sure, thank you. : if you're a risk manager or information security manager 1. Which of the following is the MOST relevant risk factor to an organization when employees use social media?

• A. Social media can be accessed from multiple locations.
• B. Social media offers a platform that can host cyber-attacks.
• C. Social media can be used to gather intelligence for attacks.
• D. Social media increases the velocity of risk and the threat capacity.

2. Which of the following is MOST helpful for protecting an enterprise from advanced persistent threats (APTs)? A. Updated security policies. B. Defining security standards. C. Regular antivirus updates. D. Threat intelligence

3. An information security manager is asked to provide a short presentation on the organization's current IT risk posture to the board of directors. Which of the following would be MOST effective to include in this presentation?

• A. Risk heat map
• B. Gap analysis results
• C. Threat assessment results
• D. Risk register