Blog

When your bank or credit card company sends you a notification of changes in how it collects or shares data, it is sending that notification in compliance with:

True or False? A quantitative risk assessment is subjective; the analysis and results are based on opinions more than facts.

True or False? In a risk management plan, the scope boundaries can include an entire organization or a single system or process.

Which of the following is not true of state attorneys general (AGs)?

What are the steps of a business continuity plan (BCP)?

True or False? The potential impact of any risk can be calculated precisely.

True or False? A risk assessment is the same as a risk management program.

True or False? POAMs are used to assign responsibility and allow management follow-up.

True or False? Scope creep is a method that allows risk management plans to adapt to changes.

True or False? The Department of Homeland Security (DHS) and its agencies focus on physical threats to national security, not cyberattacks.