1. (5 points) The information security peross entails the review and assessment of orgational a. evaluate b. direct c. monitor d. assure 2. (5 points) The application of controls that reduce the risks to an organization's information assets to an acceptable level is known as which of the following? a. risk assessment b. risk management c. risk control d. risk identification 3. (5 points) Which risk control strategy attempts to reduce the impact of a successful attack through planning and preparation? a. transference b. defense c. acceptance d. mitigation 4. (25 points) What is residual risk? What is annualized loss expectancy