QUESTION 31 In the time-based model of information security, R represents the time it takes to respond to and stop the attack the time it takes for the organization to detect that an attack is in progress. the time it takes an attacker to break through the various controls that protect the organization's information assets. the time it takes to assess threats and select risk response QUESTION 32 Which of the following is not one of the 10 internationally recognized best practices for protecting the privacy of customers' personal information? Provide free credit report monitoring for customers Utilize controls to prevent unauthorized access to, and disclosure of customers' inforration Allow customers' browsers to decline to accept cookies Inform customers of the option to opt-out of data collection and use of their personal Information QUESTION 33 Which of the following is not one of the six objectives of an information systems audit? Program modifications have received management's authorization and approval Programs have been developed and acquired in accordance with management's authorization Obtaining evidence to provide reasonable assurance the financial statements are not materially misstated Security provisions exist to protect data from unauthorized access modification, or destruction