Which of the following is not one of the three primary objectives of controls?

True or False? AES stands for Advanced Encryption Standard.

True or False? For a business impact analysis (BIA), the step of “identifying the environment” means having a good understanding of the business function.

True or False? PCI DSS is a standard for the payment card industry, not a law.

True or False? Every control must meet all three primary objectives of controls: prevent, detect, and recover.

How does a computer incident response team (CIRT) plan mitigate an organization’s risk?

Complete the equation for the relationship between risk, vulnerabilities, and threats: Risk equals:

True or False? During a business impact analysis (BIA), the highest priorities are assigned based on the shortest maximum acceptable outages (MAOs).

In most cases, should a computer incident response team (CIRT) plan include pursuing the attacker?

True or False? An uninterruptible power supply (UPS) provides power for a short amount of time during a power failure.