"Administrative controls are soft in nature but technical & physical controls ar not..."
Management Must ensure that physical, technical & administrative controls are rolled out & maintained
Management Must designate fan acceptable level of risk for the risk management team to maintain
The AIC traid: availability, integrity, confidentiality
Risk analysis is a tool used by the risk management team to help define a security budget
If you do not know these concepts, reread the necessary section in the book & review this domain
