What are the four major categories of risk management reporting requirements?

It is common to focus the scope of a risk assessment on system ownership, because doing so:

What are the seven components of Control Objectives for Information and Related Technology (COBIT)?

True or False? A risk management plan is created to increase the likelihood of risks.

True or False? The term “five nines” refers to 99.999 percent uptime of a system.

True or False? The Health Insurance Portability and Accountability Act (HIPAA) applies to the past, present, or future health of an individual.

What is not one of the three primary bureaus of the Federal Trade Commission (FTC)?

True or False? Risk assessments should be scheduled on a regular basis after a control has been implemented to determine whether the control is still useful.

True or False? Related to security policies, standards describe what should be implemented and how.

True or False? The National Institute of Science and Technology (NIST) Risk Management Framework (RMF) is a process that combines security and risk management as part of a systems development life cycle.