Question

TRUE/FALSE

1.Preserving authorized restriction on information access and disclosure, including means for protecting personal privacy and proprietary information, is referred to as Confidentiality

2.Within an organization, users should have access to all the information (or systems).

3.The purpose of the security controls is to only protect the confidentiality and integrity of the system and its information.

4.Threat Agent refers to Any potential danger to information life-cycle

5.Risk is referred to as an instance of being compromised by a threat agent.