Academic Integrity: tutoring, explanations, and feedback — we don’t complete graded work or submit on a student’s behalf.

1- Compared to the operational characteristics of the system, the mission of the

ID: 357851 • Letter: 1

Question

1- Compared to the operational characteristics of the system, the mission of the system is easy to define.

True

False

2- All of the following are reasons why configuration management is an important risk management process, EXCEPT:

It makes configuration more efficient.

It reduces unintended outages.

It is easier to maintain systems collectively.

It is easier to evaluate risks.

3- What is an example of a Group Policy?

end user license agreement

privacy policy

password policy

4-

______________ refers to how responsibilities are assigned.

Operational characteristics

Management operations

Configuration management

Management structure

nondisclosure agreement

It makes configuration more efficient.

It reduces unintended outages.

It is easier to maintain systems collectively.

It is easier to evaluate risks.

3- What is an example of a Group Policy?

end user license agreement

privacy policy

password policy

4-

______________ refers to how responsibilities are assigned.

Operational characteristics

Management operations

Configuration management

Management structure

nondisclosure agreement

Explanation / Answer

Ans 1. TRUE. For the purpose of Risk assessment, first we have to identify the system or the process to be assessed. Risk assessment is different from risk management as RA is a point in time assessment whereas RM is a continuous process. So to describe the process we have to identify two things: a) Operational Characteristics and b) mission of the system.

Operational characteristics defines how the system is being operated within the environment and includes identifying the current configuration and operation of the system. Mission of the system defines what the system actually does. So, it is true that the mission is easy to define as compared to the operational characteristics of the firm because mission statement of a system can be very brief, even a paragraph with simple sentences, whereas operational characteristics thouroughly explains the working and processing of that system.

Ans. 2 It reduces unintended outages. Configuration management, along with change management, is an important process of risk management, because they both directly impact the risk assessment. It makes configuration more effficient by using techniques like baselines, automation and scripting. It ensures that the similar systems have simialr configurations, thus it is easier to manage system collectively. Evaluation of the risk become more easier with the help of configuration management.

The second function of reducing unintended outages is performed by change management as it prevents the changes that are unapproved by the system and each change is formally approved by the system through change management process.

Ans. 3 Password policy Group policy is a management tool by Microsoft Windows that manage the users accounts by manageing the working environment. It ensures that the users chose complex and strong passwords over simple passwords, to prevent unidentified users and to block acess to certain folders. So password policy is a godd example of Group Policy.

Ans. 4 Management structure refers to how the responsibilities are assigned. It defines how a company operates and lay down rules and policies that determine delegation of tasks and responsibilities, decision- making and information flow within the organization. All other three functions, i.e. operational characteristics, management operation and configuration management are parts of risk assessement.

Non Disclosure Agreement also known as Confidentiality agreement is legal agreement between two or more parties that agree to maintain secrecy in their contract and restrict and information share to third party. It can be used while sharing any new product, invention, knowledge, idea or any other confidential information.