An organization is referencing NIST best practices for BCP creation while reviewing current internal organizational processes for mission-essential items.

Which of the following phases establishes the identification and prioritization of critical systems and functions?

Options:

A Review a recent gap analysis.
B Perform a cost-benefit analysis.
C Conduct a business impact analysis.
D Develop an exposure factor matrix.    

A security analyst is performing a vulnerability assessment on behalf of a client. The analyst must define what constitutes a risk to the organization.

Which of the following should be the analyst's FIRST action?

Options:

A Create a full inventory of information and data assets.
B Ascertain the impact of an attack on the availability of crucial resources.
C Determine which security compliance standards should be followed.
D Perform a full system penetration test to determine the vulnerabilities.

matrix organizational structure

It is very difficult to manage data for which of the following reasons?

1. The amount of data stays about the same over time.
2. Data are stored in the same format throughout the organization.
3. Data are scattered throughout the organization.
4. The decreasing amount of external data needs to be considered.
5. Data security is easy to maintain