Isabelle is a project manager. Her company is regulated and subject to regular audits for compliance. One regulation the company needs to comply with is Health Insurance Portability and Accountability Act (HIPAA). Isabelle needs a tool for tracking the company’s progress in meeting HIPAA compliance. The tool should also enable her to assign responsibility for tasks, and it should provide management an easy way to check the status of the project. Which of the following would be most useful in this situation?

True or False? A risk assessment team should focus on critical areas.

True or False? Literary and artistic works are examples of intellectual property.

True or False? A qualitative risk assessment attempts to prioritize risk and to evaluate the effectiveness of controls.

_________ are acts that are hostile to an organization.

Hajar is a security professional for a government contractor. Her company recently hired three new employees for a special project, all of whom have a security clearance for Secret data. Rather than granting the employees access to all files and folders in the data repository, she is granting them access only to the data they need for the project. What principle is Hajar following?

The formulas used in a quantitative risk assessment typically look at a single year. The calculations can become quite complex if other costs are included. Which of the following is not usually included in the calculations?

True or False? Many risk assessment challenges are dependent on whether a quantitative or qualitative assessment is being performed.

________ help(s) prevent a hard drive from being a single point of failure. __________ help(s) prevent a server from being a single point of failure. _________ help(s) prevent a person from being a single point of failure.

True or False? The scope identifies the boundaries of a risk management plan.