MIS 416 Exam 1 pt. 2(with Errorless answers)
There are complete and set guidelines for how to perform personnel observations during the RIIOT
technique. correct answers False
Productivity and replacement costs occur mostly as secondary loss. correct answers False
Stratified Sampling is "based on a systematic approach to selecting sample units from a population."
correct answers False
According to Talabis, what is the most rigorous and most encompassing activity in the information
security risk assessment process? correct answers Data collection
Factors to consider when gathering information about resources include everything but? correct answers
Social concerns
A threat event where loss materializes and/or where liability increases. correct answers Loss event
Which of the following is NOT an example of what type of document a risk assessor could request during
a risk assessment correct answers Previously considered IT Security Recommendations
Place the 5 approaches of the RIIOT method in order correct answers Review documents, Interview key
personnel, Inspect security controls, Observe personal behavior, Test security control
The RIIOT approach to data gathering has all the following benefits except? correct answers Simplicity
Questionnaires, forms, and surveys are the standard way to collect data for a BIA. correct answers False
What type of sampling technique is the following - "This sampling technique selects clusters of sample
units from the population to create a representation sample." correct answers Cluster sampling
When using the RIIOT method for data gathering, it is essential to inspect security controls prior to
interviewing key personnel in order to understand the systems that employees are operating and
potentially putting at risk correct answers False
There are complete and set guidelines for how to perform personnel observations during the RIIOT
technique. correct answers False
Productivity and replacement costs occur mostly as secondary loss. correct answers False
Stratified Sampling is "based on a systematic approach to selecting sample units from a population."
correct answers False
According to Talabis, what is the most rigorous and most encompassing activity in the information
security risk assessment process? correct answers Data collection
Factors to consider when gathering information about resources include everything but? correct answers
Social concerns
A threat event where loss materializes and/or where liability increases. correct answers Loss event
Which of the following is NOT an example of what type of document a risk assessor could request during
a risk assessment correct answers Previously considered IT Security Recommendations
Place the 5 approaches of the RIIOT method in order correct answers Review documents, Interview key
personnel, Inspect security controls, Observe personal behavior, Test security control
The RIIOT approach to data gathering has all the following benefits except? correct answers Simplicity
Questionnaires, forms, and surveys are the standard way to collect data for a BIA. correct answers False
What type of sampling technique is the following - "This sampling technique selects clusters of sample
units from the population to create a representation sample." correct answers Cluster sampling
When using the RIIOT method for data gathering, it is essential to inspect security controls prior to
interviewing key personnel in order to understand the systems that employees are operating and
potentially putting at risk correct answers False
