The common criteria process is based on two key elements.  One key element is a protection profile.   What is the other?

The three primary factors of authentication are something you know (such as a password or PIN), something you have (such as a smartcard or token), and ________________?  

The _________________ is considered the heart of BCP.  It identifies the resources that are critical to an organization’s ongoing viability and the threats posed to those resources.

Which one of the following security programs is designed to provide employees with the knowledge they need to perform their specific work tasks?

At the Greenville Cloud Company, the Linux operating system access controls comprise which of the following?

What should management consider the most when classifying data?

Mary needs to get senior management to assign the responsibility of protecting specific data sets to the individual business unit managers, thus making them data owners. Which of the following would be the most important in the criteria the managers would follow in the process of actually classifying data once this responsibility has been assigned to them?

Which of the following is the highest level of private-sector (commercial) data classification?

You have been asked to calculate the annualized loss expectancy (ALE) of an HR database with the following variables: Single loss expectancy = $25,000 Exposure factor = .90 Annualized rate of occurrence = .40 Residual risk = $3,000

Rachel, an attorney, has been hired to fill a new position at Widgets Inc. The position is Chief Privacy Officer (CPO).  What is the primary function of her new role?