The property of a system or a system resource being accessible and usable upon demand by an authorized
system entity, according to performance specifications for the system is referred to as?

Which of the following choices is NOT normally part of the questions that would be asked in regards to an
organization’s information security policy?

An effective information security policy should NOT have which of the following characteristic?

Which of the following is an advantage of a qualitative over a quantitative risk analysis?

Which of the following is NOT a common integrity goal?

Which of the following tasks is NOT usually part of a Business Impact Analysis (BIA)?

Qualitative loss resulting from the business interruption does NOT usually include:

In an organization, an Information Technology security function should:

What can best be defined as high-level statements, beliefs, goals and objectives?

Which of the following control pairings include: organizational policies and procedures, pre-employment
background checks, strict hiring practices, employment agreements, employee termination procedures,
vacation scheduling, labeling of sensitive materials, increased supervision, security awareness training,
behavior awareness, and sign-up procedures to obtain access to information systems and networks?