a. What are the four ways of responding to risk? b. Which involves doing nothing? c. Which involves insurance? d. Why is insurance not a way to not deal with security? e. What is risk avoidance? f....

a. What are the four ways of responding to risk? b. Which involves doing nothing? c. Which involves insurance? d. Why is insurance not a way to not deal with security? e. What is risk avoidance? f. Why does risk avoidance not endear IT security to the rest of the firm?

a. What is a firm’s technical security architecture? b. Why is a technical security architecture needed? c. When is the best time to create one? d. Why do firms not simply replace their legacy security technologies immediately?