Have you defined your Risk Profile and your Risk Appetite? What is your current and future risk profile? Funding and resources - how have decisions been made about the allocation of personnel and resources for the compliance and relevant control functions in light of your organizations risk profile? How do mobile apps and cloud-based applications affect your organizations security risk profile? Have partners audited own supply chain risk profile?...