Which of the following is not a risk factor as stated in NIST SP 800-37? Response:

Who is the organizational official responsible for the development, implementation, assessment, and monitoring of security controls in an information system? Response:

A backup facility that has the necessary electrical and physical components of a computer facility, but does not have the computer equipment in place. The site is ready to receive the necessary replacement computer equipment in the event that the user has to move from their main computing location to an alternate site.
Response:

What are the four phases for interconnecting systems?
Response:

A group of any records under the control of any agency from which information is retrieved by the name of the individual or by some identifying number, symbol, or other identifying particular assigned to the individual defines which of the following?
Response: