True or False? Asset replacement insurance is intended to replace assets damaged from a disaster.

True or False? In a quantitative risk assessment, the formula for risk is Probability × Impact.

True or False? The Capability Maturity Model Integration (CMMI) can help improve software development processes.

What is the relationship between Enron and the Sarbanes-Oxley Act (SOX)?

True or False? Data is a tangible asset.

True or False? The findings in a risk report to management are described as cause, criteria, and effect.

Isabelle is a project manager. Her company is regulated and subject to regular audits for compliance. One regulation the company needs to comply with is Health Insurance Portability and Accountability Act (HIPAA). Isabelle needs a tool for tracking the company’s progress in meeting HIPAA compliance. The tool should also enable her to assign responsibility for tasks, and it should provide management an easy way to check the status of the project. Which of the following would be most useful in this situation?

True or False? A risk assessment team should focus on critical areas.

True or False? Literary and artistic works are examples of intellectual property.

True or False? A qualitative risk assessment attempts to prioritize risk and to evaluate the effectiveness of controls.