1-True or false Cost of quality is the cost of creating a quality product or ser
ID: 3224894 • Letter: 1
Question
1-True or false
Cost of quality is the cost of creating a quality product or service.
Cost-optimal level of quality is where where the sum of preventive and corrective costs is lowest.
Higher level of cyber security is always the rational choice.
Combinations of levels of technology activities belonging to an IsoQ curve necessarily have the same total costs.
Incentive to under-report cyber incidents is one reason there is shortage of relevant data needed to drive rational security investment.
Economic barriers suggest that aside from technological interventions, regulatory intervention may be necessary to strengthen cyber security
Ex Ante Safety Regulation is designed to prevent accidents by prescribing safeguards before accidents occur
In cyber security risk management, Information sharing is concerned with taking facts known to one party and making them also known to others to reduce information asymmetries.
In the NIST framework, business/process level of an organization communicates the mission priorities, available resources, and overall risk tolerance to the executive level.
In the NIST framework, there is no distinction between Current Profile and the Target Profile.
The NIST framework is designed to replace a company’s existing cyber risk management processes.
The NIST framework do not address the prioritization of expenditures to maximize the impact of cyber security investments.
Explanation / Answer
Cost of quality is the cost of creating a quality product or service. - FALSE (It’s the cost of NOT creating a quality product or service.)
Cost-optimal level of quality is where where the sum of preventive and corrective costs is lowest. FALSE (Cost-optimal level of quality is where where the corrective costs is lowest)
Higher level of cyber security is always the rational choice. - TRUE
Combinations of levels of technology activities belonging to an IsoQ curve necessarily have the same total costs. - TRUE
Incentive to under-report cyber incidents is one reason there is shortage of relevant data needed to drive rational security investment. - TRUE
Economic barriers suggest that aside from technological interventions, regulatory intervention may be necessary to strengthen cyber security - TRUE
Ex Ante Safety Regulation is designed to prevent accidents by prescribing safeguards before accidents occur. - TRUE
In cyber security risk management, Information sharing is concerned with taking facts known to one party and making them also known to others to reduce information asymmetries. - TRUE
In the NIST framework, business/process level of an organization communicates the mission priorities, available resources, and overall risk tolerance to the executive level. - TRUE
In the NIST framework, there is no distinction between Current Profile and the Target Profile. - FALSE (“Current” Profile (the “as is” state) with a “Target” Profile (the “to be” state). )
The NIST framework is designed to replace a company’s existing cyber risk management processes. - FALSE (The Framework provides a common language for understanding, managing, and expressing cybersecurity risk both internally and externally. )
The NIST framework do not address the prioritization of expenditures to maximize the impact of cyber security investments. - FALSE (It address the prioritization of expenditures to maximize the impact of cyber security investments.)
Related Questions
Navigate
Integrity-first tutoring: explanations and feedback only — we do not complete graded work. Learn more.