Move exercises in the Exercises part

Author: Polpetta

res/sections/21-Les11042017.tex

@@ -87,111 +87,5 @@ \subsection{Due Diligence}
 
 
 \section{Esercizi}
-%ESERCIZI
 
-Il Risk Assessment includes:
-\begin{itemize}
-\item The steps: risk analysis, risk treatment, risk acceptance, and risk
-monitoring
-\item Answers the question: What risk are we prone to, and what is the financial
-costs of these risks?
-\item Assesses controls after implementation
-\item The identification, financial analysis, and prioritization of risks, anon
-of controls (risposta esatta)
-\end{itemize}
-
-
-% Altro esercizio
-Risk management includes:
-\begin{itemize}
-\item The steps: risk analysis, risk treatment, risk acceptance, and risk
-monitoring (risposta esatta)
-\item Answers the question: What risk are we prone to, and what is the financial
-costs of these risks?
-\item Assesses controls after implementation
-\item The identification, financial analysis, and prioritization of risks, anon
-of controls
-\end{itemize}
-
-% Altro esercizio
-The FIRST step in Security Risk assessment is:
-\begin{itemize}
-\item determine threats and vulnerabilities
-\item determine values of key assets (corretta)
-\item Analyze existing controls
-\item
-\end{itemize}
-
-
-
-% Altro
-
-\begin{itemize}
-\item The probability that an attack will occur in one year
-\item The duration of time where a loss is expected to occur
-\item The cost (risposta esatta)
-\end{itemize}
-
-
-The role(s) responsible for deciding whether risk should be accepted,
-transferred, or mitigated is:
-\begin{itemize}
-\item The Chied information officer
-\item The chief risk officer
-\item The chif information security officier
-\item Enterprise fovernance and senior business management (risposta esatta)
-\end{itemize}
-
-% Altro esercizio
-
-Which of these risk is best measured using a qualitative process?
-\begin{itemize}
-\item Temporart power outae in an office building
-\item loss of consumer confidence due to a malfunctioning website (corretta)
-\item Theft of an mployee's laptop while traveling
-\item Disruption of supply deliveries due to flooding
-\end{itemize}
-
-% Altro esercizio
-The risk that is assumed after implementing controls is known as:
-
-\begin{itemize}
-\item accepted risk
-\item ALE
-\item Quantitative risk
-\item residual risk (corretta)
-\end{itemize}
-
-% Altro esercizio
-The primary purpose of risk management is to:
-\begin{itemize}
-\item Eliminate all risk
-\item Find the most cost-effective controls
-\item Reduce risk o an acceptable level (corretta)
-\item Determine budget for residual risk
-\end{itemize}
-
-% Altro esercizio
-Due diligence ensures that
-
-\begin{itemize}
-\item An organization has exercised the best possible security practices
-according to best practices
-\item An organization has exercised acceptably reasonable security practices
-addressing all major security areas
-\item An organization has implemented risk management and established the
-necessary controls
-\item An organization has allocated a CISO who is responsible for securing the
-organization's information assets
-\end{itemize}
-
-% Altro esercizio
-
-\begin{itemize}
-\item The average cost of loss of this asset, for a single incident
-\item An estimate using quantitative risk management of the frequency of asset
-loss due to a threat
-\item an estimate using qualitative risk management of the priority of the
-vulnerability
-\item ALE = SLE x ARO (corretta)
-\end{itemize}
+Gli esercizi relativi a questa parte si possono trovare in \ref{esGestRisk}