QUESTION 14 Placing the IT security department within the information technology (IT) department is attractive because security and IT share many of the same technological skill set. True False QUESTION 15 Governance frameworks specify how to do security planning and implementation True False QUESTION 16 Oversight is a process, function, or group of tools that are used to improve policy implementation and enforcement True False QUESTION 18 Most of a countermeasure's life consists of the operational stage after development True False QUESTION 19 In the United States, the Federal Trade Commission (FTC) has powers to prosecute firms that fail to take reasonable precautions to protect private information so that there are no limitations on the FTC's powers. True False QUESTION 20 Legacy security technologies are the security technologies that a company implemented in the past and that now are at least somewhat ineffective True False