-- of 3 points Question 3 3 tries left Which of the following statements are true? (Check all that apply.) A. The CIRT should include technical specialists. B. The CIRT should include members of senior management. C. Members of the CIRT must have multiple methods of communicating with one another (e.g., e-mail, landlines, cellphones, etc.). D. None of these are correct Question 4 3 tries left Which of the following statements are true? (Check all that apply.) A. Organizations that have a CISO are more likely to have a well-trained CIRT. B. Ideally, the CISO should report to a member of senior management, such as the COO or CEO, rather than to the CIO. C. The CIO has responsibility that vulnerability risk assessments and security audits are periodically conducted. D. The CIO needs to work closely with the person in charge of physical security because unauthorized physical access enables an attacker to bypass logical access controls. Question 5 3 tries left Which of the following statements is(are) true? (Check all that apply.) A. Creating the position of CISO is one way to satisfy the time-based model of security by increasing the value of R. B. A CIRT can improve the time-based model of security by increasing the value of R. C. A CIRT can improve the time-based model of security by reducing the value of R. D. Creating the position of CISO is one way to satisfy the time-based model of security by reducing the value of R