11. What law provides liability protections to private sector entities for sharing cybersecurity threat information with the federal government? 12. In data breach lawsuits, plaintiffs' cases are often dismissed due to a lack of standing. Why? 13. Companies may be legally required to notify customers after they suffer a data breach. Provide two (2) reasons why data breach notification might be burdensome to businesses? 14. Current US data privacy law can best be described as: A. A fundamental right explicitly guaranteed by the US Constitution. B. A patchwork of federal laws, industry-specific regulations, and state laws. c. An area of law reserved for the states. p. None of the above. 15. What factors should be considered to determine if a cyber attack constitutes a \"use of force\" under international law? 16. Provide an example of a peacetime norm of state behavior in cyberspace. 17. Identify four (4) things a good cyber incident response plan should include. 18. The NIST Cybersecurity Framework Core consists of what five (5) functions? 19. What is the core mission of the Cybersecurity and Infrastructure Security Agency (CISA)? A. Draft cybersecurity legislation for Congress to consider. B. To identify threats, share information and assist with incident response in defense of the nation's critical infrastructure. c. Coordinate all federal government agencies responsible for cyber incident response. p. Issue cybersecurity regulations for the private sector