An organization has a process in place that involves the use of a vendor. A risk assessment was completed
during the development of the process. A year after the implementation a monetary decision has been made to
use a different vendor. What, if anything, should occur?

Which of the following authentication methods prevents authentication replay?

Which of the following steps should be performed FIRST in the risk assessment process?

An information security manager is advised by contacts in law enforcement that there is evidence that his/ her
company is being targeted by a skilled gang of hackers known to use a variety of techniques, including social
engineering and network penetration. The FIRST step that the security manager should take is to: