Section: Protection of Information Assets
Explanation:
Earned value analysis (EVA) is an industry standard method for measuring a project's progress at any given point in time, forecasting its completion date and final cost, and analyzing variances in the schedule and budget as the project proceeds. It compares the planned amount of work with what has actually been completed, to determine if the cost, schedule and work accomplished are progressing in accordance with the plan. EVA works most effectively if a well-formed work breakdown structure exists. Function point analysis (FPA) is an indirect measure of software size and complexity and, therefore, does not address the elements of time and budget. Cost budgets do not address time. PERT aids in time and deliverables management, but lacks projections for estimates at completion (EACs) and overall financial management.

The greatest impact as a result of the ongoing deterioration of a detective control is an increased number of false negatives in security logs. A detective control is a control that monitors and identifies any deviations or anomalies from the expected or normal behavior or performance of a system or process. A security log is a record of events or activities that occur within a system or network, such as user access, file changes, system errors, or security incidents. A false negative is a situation where a security log fails to detect or report an actual deviation or anomaly that has occurred, such as an unauthorized access, a malicious modification, or a security breach. An increased number of false negatives in security logs can have a significant impact on the organization's security posture and risk management, because it can prevent timely detection and response to security threats, compromise the accuracy and reliability of security monitoring and reporting, and undermine the accountability and auditability of user actions and transactions. The other options are not as impactful as anincreased number of false negatives in security logs, because they either do not affect the detection capability of a detective control, or they have less severe consequences for security management. References: CISA Review Manual (Digital Version)1, Chapter 5, Section 5.2.1

Section: Protection of Information Assets
Explanation:
Validated electronic signatures are based on qualified certificates that are created by a certification
authority (CA), with the technical standards required to ensure the key can neither be forced nor
reproduced in a reasonable time. Such certificates are only delivered through a registration authority (RA)
after a proof of identity has been passed. Using strong signatures in e- mail traffic, nonrepudiation can be
assured and a sender can be tracked. The recipient can configure their e-mail server or client to
automatically delete e-mails from specific senders. For confidentiality issues, one must use encryption, not
a signature, although both methods can be based on qualified certificates. Without any filters directly
applied on mail gateway servers to block traffic without strong signatures, the workload will not increase.
Using filters directly on a gateway server will result in an overhead less than antivirus software imposes.
Digital signatures are only a few bytes in size and will not slash bandwidth. Even if gateway servers were to
check CRLs, there is little overhead.