True or false

1) service providers should not base their core business model on risk management

2) risk management is a critical process that touches every aspect of organisational asset activities of the professional protection officer

3)controlling function depends on gathering and evaluate information

4) the integrity of information is threatened when it is not subject to corruption