In a Discretionary Access Control (DAC) model, how is access to resources managed?

Before securing a email system using OpenPGP in an organization, Which of the following actions MUST be performed?

An organization suffered a loss to an asset at a frequency that was different than the initially estimated Annualized Rate of Occurrence (ARO). What is the appropriate course of action?

Open Authorized (OAuth) has been chosen as technology to use across applications in the enterprise. Which of the following statements is TRUE about an OAuth token?

An organization is running a cloud-based application to process the information obtained at point-of-sale devices. Which guideline should be applied to the application?