Cis 349 - Study guides, Class notes & Summaries

What is generally NOT a negative effect of noncompliance with regulations?What term is given to the practice of mitigating risks through controls?Organizations are expected to abide by any laws that apply to them. What is this commonly called?Which of the following requires organizations to have an annual assessment by a Qualified Security Assessor (QSA)?Which of the following best describes Certification and Accreditation (C&A)?Which law requires consent to disclose educational records othe...

CIS 349 Final Exam 1. Many organizations use a RACI matrix to document tasks and the personnel responsible for the assignments. RACI stands for ___________, ___________, consulted, and informed. 2. Regarding user security clearances, in addition to possessing a clearance level that matches or exceeds the classification label of an object, a subject must have the ___________ for the object as well. 3. Company A has a project plan for a new product under development. The product will be ...