True or False? The term “five nines” refers to 99.999 percent uptime of a system.

True or False? The Health Insurance Portability and Accountability Act (HIPAA) applies to the past, present, or future health of an individual.

What is not one of the three primary bureaus of the Federal Trade Commission (FTC)?

True or False? Risk assessments should be scheduled on a regular basis after a control has been implemented to determine whether the control is still useful.

True or False? Related to security policies, standards describe what should be implemented and how.

True or False? The National Institute of Science and Technology (NIST) Risk Management Framework (RMF) is a process that combines security and risk management as part of a systems development life cycle.

True or False? Management is responsible for making the decisions on how to manage risks.

True or False? Asset replacement insurance is intended to replace assets damaged from a disaster.

True or False? In a quantitative risk assessment, the formula for risk is Probability × Impact.

True or False? The Capability Maturity Model Integration (CMMI) can help improve software development processes.