5. Why do networking components need more examination from an information security

perspective than from a systems development perspective?

6. What value does an automated asset inventory system have during risk identification?

7. What information attribute is often of great value for local networks that use static

addressing?

8. When devising a classification scheme for systems components, is it more important

that the asset identification list be comprehensive or mutually exclusive?

9. Whats the difference between an assets ability to generate revenue and its ability to

generate profit?