in which of the following technical infrastructure audits should attention be turned to physical security and environmental controls?

Which of the following statements are true regarding the use of heat maps as risk assessment tools?
1. They focus primarily on known risks, limiting the ability to identify new risks.
2. They rely heavily on objective assessments and related risk tolerances.
3. They are too complex to provide an easily understandable view of key risks.
4. They are helpful but limited in value in a rapidly changing environment.

Which mindset promotes the most comprehensive risk management strategy?

Which of the following principles is shared by both hierarchical and open organizational structures?
1) A superior can delegate the authority to make decisions but cannot delegate the ultimate responsibility for the results of those decisions
2) A supervisor's span of control should not exceed seven subordinates
3) Responsibility should be accompanied by adequate authority
4) Employees at all levels should be empowered to make decisions.

Which of the following best describes an objective for an audit of an environmental management system?