Computer and Information Security Handbook, 4th Edition

Appendix G

Answers to Review Questions/Exercises, Hands-on Projects, Case Projects, and Optional Team Case Project by Chapter

Chapter 1: Information Security in the Modern Enterprise

Review Questions/Exercises

True/False

• 1. True
• 2. False
• 3. False
• 4. True
• 5. False

Multiple Choice

• 1. D
• 2. E
• 3. A
• 4. C
• 5. B

Exercise

Solution

The following is a partial exercise solution. The students should be able to expand on the following:

Security control assessments may be conducted by different organizational entities with distinct oversight responsibilities. However, success requires the cooperation and collaboration among all parties having a vested interest in the organization's information security posture, including information system owners, common control providers, authorizing ...