What is the difference between a threat agent and a threat?

What is the difference between vulnerability and exposure?

How is infrastructure protection $($assuring the security of utility services$)$ related to

information security?

What type of security was dominant in the early years of computing?

What are the three components of the C$.$I.A$.$ triangle? What are they used for?

If the C$.$IA$.$ triangle is incomplete, why is it so commonly used in security?

Describe the critical characteristics of information. How are they used in thifistudy of computer security?

Identify the six components of an information system. Which are most directly affected by the study of computer security? Which are most commonly associated with its study?

What system is the predecessor of almost all modern multuser systems?

Which paper is the foundation of all subsequent studies of computer security?

Why is the top$-$down approach to information security superior to the bottom$-$up approach?

Why is a methodology important in the implementation of information security? How does a methodology improve the process?

Which members of an organization are involved in the security systems development life cycle? Who leads the process?

How can the practice of information security be described as both an art and a science? How does the view of security as a social science influence its practice?

Who is ultimately responsible for the security of information in the organization?

What is the relationship between the MULTICS project and the early development of computer security?

How has computer security crolved into modern information security?

What was important about Rand Report R$-609?$

Who decides how and when data in an organization will be used or controlled? Who is responsible for seeing that these decisions are carried out?

Who should lead a security team? Should the approach to security be more managerial or technical?