What do you mean by Risk Governance, Risk Assessment, Risk Culture and Risk Appetite?

Discuss the importance and necessity of Data Backup for a bank which has active DC and DRS in place.

Explain the necessity of Vulnerability Assessment and Penetration Testing (VAPT) of an internet facing application before production roll-out and also for post-production operations.