QUESTION 28 The McCumber cube constitutes a comprehensive risk assessment process. O True O False QUESTION 29 McCumber (2005) repudiates previous models such as the Bell-LaPadula model and the Rainbow Series (beginning with "the Orange Book"), and the Common Criteria as being insufficient for information assurance. O True o False QUESTION 30 In which step of disaster recovery planning is each policy and procedure drafted, reviewed, and approved by management and all of the departments and organizations responsible for its implementation? O Organizing the team O Assessing risks in the enterprise O Documenting disaster recovery procedures O Preparing to handle disasters QUESTION 31 Five out of every ten organizations surveyed have been through a disaster. O True False