A Chief Information Security Officer (CISO) has been trying to eliminate some IT security risks for
several months. These risks are not high profile but still exist. Furthermore, many of these risks
have been mitigated with innovative solutions. However, at this point in time, the budget is
insufficient to deal with the risks. Which of the following risk strategies should be used?

The firm’s CISO has been working with the Chief Procurement Officer (CPO) and the Senior
Project Manager (SPM) on soliciting bids for a series of HIPS and NIPS products for a major
installation in the firm’s new Hong Kong office. After reviewing RFQs received from three vendors,
the CPO and the SPM have not gained any real data regarding the specifications about any of the
solutions and want that data before the procurement continues. Which of the following will the
CPO and SPM have the CISO do at this point to get back on track in this procurement process?

To prevent a third party from identifying a specific user as having previously accessed a service
provider through an SSO operation, SAML uses which of the following?