3. (TCO A) While our focus in the course is on threats to information systems, this question focuses on the concept of threats, vulnerabilities, and controls as applied to other kinds of systems. Select two examples of threats to aircraft for which aviation manufactures and/or regulators have instituted controls. Describe the vulnerabilities for which the controls were created and assess the effectiveness of these controls giving the justification for your assessment. Your answer does not need to address information security but you need to demonstrate your understanding of the terms: threat, vulnerability, and control.

4. (TCO A) To what extent does U.S. Combined Federal Criteria quantitatively and measurably demonstrate the practical effectiveness of the security measures it mandates? In other words, how well does it objectively measure real-world security? How would this influence your use of this standard in a given computing environment? Be sure that your answer addresses quantitative and measurable practical effectiveness.