A.Single Loss Expectancy

B.Life Cycle Loss Expectancy

C.Safeguard Value

D.Cost Benefit Analysis

A.That the protection of some information such as National ID information is mandated by regulation and other information such as trade secrets are protected based on business need.

B.There is no relationship between the two.

C.That all information in an organization must be protected equally.

D.The information required to be protected by regulatory mandate does not have to be identified in the organizations data classification policy.

A.Outsource compliance to a 3rd party vendor and let them manage the program.

B.Have Compliance direct Information Security to fix issues after the auditors report.

C.Have Compliance and Information Security partner to correct issues as they arise.

D.Only check compliance right before the auditors are scheduled to arrive onsite.

A.Risk Transfer

B.Risk Mitigation

C.Risk Avoidance

D.Risk Acceptance

A.Identifying the risk

B.Finding economic balance between the impact of the risk and the cost of the control

C.Assessing the impact of potential threats

D.Identifying the victim of any potential exploits.