True or False? The Capability Maturity Model Integration (CMMI) can help improve software development processes.

What is the relationship between Enron and the Sarbanes-Oxley Act (SOX)?

True or False? Data is a tangible asset.

True or False? The findings in a risk report to management are described as cause, criteria, and effect.

Isabelle is a project manager. Her company is regulated and subject to regular audits for compliance. One regulation the company needs to comply with is Health Insurance Portability and Accountability Act (HIPAA). Isabelle needs a tool for tracking the company’s progress in meeting HIPAA compliance. The tool should also enable her to assign responsibility for tasks, and it should provide management an easy way to check the status of the project. Which of the following would be most useful in this situation?

True or False? A risk assessment team should focus on critical areas.

True or False? Literary and artistic works are examples of intellectual property.

True or False? A qualitative risk assessment attempts to prioritize risk and to evaluate the effectiveness of controls.

_________ are acts that are hostile to an organization.

Hajar is a security professional for a government contractor. Her company recently hired three new employees for a special project, all of whom have a security clearance for Secret data. Rather than granting the employees access to all files and folders in the data repository, she is granting them access only to the data they need for the project. What principle is Hajar following?