Which of the following is one of the questions that IT operations should consider when
formulating risk action plans?

A.
Do the operations staff buy an information system to prevent a risk from occurring?

B.
Do the operations staff delegate the identification of a risk?

C.
Do the operations staff develop an information system to prevent a risk from occurring?

D.
Do the operations staff know enough about the risk?