Fill in the blank with an appropriate phrase. __________ seeks to improve the quality of process outputs by identifying and removing the causes of defects and variability in manufacturing and business processes.

FITSAF stands for Federal Information Technology Security Assessment Framework. It is a methodology for assessing the security of information systems. Which of the following FITSAF levels shows that the procedures and controls are tested and reviewed

A. Level 4

B. Level 5

C. Level 1

D. Level 2

E. Level 3

Which of the following federal laws is designed to protect computer data from theft

A. Federal Information Security Management Act (FISMA)

B. Computer Fraud and Abuse Act (CFAA)

C. Government Information Security Reform Act (GISRA)

D. Computer Security Act

Which of the following guidelines is recommended for engineering, protecting, managing, processing, and controlling national security and sensitive (although unclassified) information A. Federal Information Processing Standard (FIPS)

B. Special Publication (SP)

C. NISTIRs (Internal Reports)

D. DIACAP by the United States Department of Defense (DoD)

The phase 3 of the Risk Management Framework (RMF) process is known as mitigation planning. Which of the following processes take place in phase 3 Each correct answer represents a complete solution. Choose all that apply.

A. Agree on a strategy to mitigate risks.

B. Evaluate mitigation progress and plan next assessment.

C. Identify threats, vulnerabilities, and controls that will be evaluated.

D. Document and implement a mitigation plan.