MIS 416 Exam #2 Study Guide (All Correct)

Logs need to be reviewed. (T/F) correct answers True What type of control ensures that account management is secure? correct answers account management controls You have created a risk assessment, and management has approved it. What do you do next? correct answers Create a risk mitigation plan. Which of the following describes an organization's efforts to reduce damage caused by a realized incident or disaster? correct answers mitigation What is a significant part of the step of evaluating controls and determining which controls to implement? correct answers CBAs A decision is made to accept, avoid, transfer, or mitigate a risk is done in the risk evaluation stage. (T/F) correct answers True When a vulnerability (flaw or weakness) exists in an important asset, implement security controls to reduce the likelihood of a vulnerability being ___________. correct answers exploited One of the ways to identify controls is to identify critical business functions and critical business operations. (T/F) correct answers True What is Risk Acceptance? correct answers The appropriate risk response when the identified risk is within the organizational risk tolerance. Which of the following affects the cost of a control? correct answers maintenance The risk control strategy were the organization is willing to accept the current level of risk and makes a conscious decision to do nothing to protect an information asset from risk and to accept the outcome from any resulting exploitation is known as the termination risk control strategy. (T/F) correct answers False If an in-place countermeasure needs to be upgraded or replaced, you should disable or remove the countermeasure until the new or upgraded control can be installed in order to best reduce vulnerabilities. (T/F) correct answers False The risk control strategy that attempts to shift risk to other assets, other processes, or other organizations is known as the defense risk control strategy. (T/F) correct answers False Insurance, background checks, and security plans are all categories of ____________. correct answers procedural controls