A security analyst is performing a vulnerability assessment on behalf of a client. The analyst must define what constitutes a risk to the organization.

Which of the following should be the analyst's FIRST action?

Options:

A Create a full inventory of information and data assets.
B Ascertain the impact of an attack on the availability of crucial resources.
C Determine which security compliance standards should be followed.
D Perform a full system penetration test to determine the vulnerabilities.

It is very difficult to manage data for which of the following reasons?

1. The amount of data stays about the same over time.
2. Data are stored in the same format throughout the organization.
3. Data are scattered throughout the organization.
4. The decreasing amount of external data needs to be considered.
5. Data security is easy to maintain

Which of the following is a characteristic of cloud-based hosting?

1. full control of data location
2. in-depth visibility of security
3. no obsolesce
4. unknown cost structure

which of the following statements is true of information systems?

A) Information systems include all business process activities.
B) Every information system has at least one application.
C) Information systems should be bought entirely off-the-shelf.
D) Every business process should include at least one information system.