1. What are the steps with in the risk management frame work, explain each step and give an example of how they apply to a system such as a firewall, server, or computer?

2. What is a system security risk management approach?

3. Give a specific example as it applies to a technology system, such as a firewall. What does it mean to implement controls based on the system and not an enterprise base risk management approach?

4. Give specific examples? What is fisma? Who does it apply to? What is fips? Who does it apply to? What are 6 benefits to sp 800-37. Give examples to each.