Question 136

Fill in the blank with the appropriate phrase. The ____________ is the risk that remains after the implementation of new or enhanced controls.
  • Question 137

    Which of the following elements of Registration task 4 defines the operating system, database management system, and software applications, and how they will be used
  • Question 138

    Which of the following phases of NIST SP 800-37 C&A methodology examines the residual risk for acceptability, and prepares the final security accreditation package
  • Question 139

    FITSAF stands for Federal Information Technology Security Assessment Framework. It is a methodology for assessing the security of information systems.
    Which of the following FITSAF levels shows that the procedures and controls are tested and reviewed?
  • Question 140

    Which of the following techniques are used after a security breach and are intended to limit the extent of any damage caused by the incident