What activity informs situational awareness of the security status of an organization's systems?

Which category addresses the detection of unauthorized code in software?

What identifies the value of data to an organization so that confidentiality and integrity can be protected and intelligent data handling decisions can be made?

Your data center uses a diesel generator as backup for two different power grids provided by your regional power company. During a period of unprecedented heat, you experience brown-outs on both grids simultaneously.
The diesel generator starts up but only runs for two minutes before it also shuts down, leaving your entire data center down until grid power can be restored. Further inspection reveals a clogged fuel filter.
Failing to schedule preventive service for the backup generator is a failure in which function?

A company has just acquired an intrusion detection system (IDS) whose detection capabilities are based on behavior and baselines. The IDS has not been in production long enough to establish baselines or to understand what constitutes normal activity.
This lack prevents the CSIRT from making what determination regarding a breach?