Each response to a  question should be (about 100 words)

In your own words describe what is meant by "defense-in-depth" in security design. Give an example of a combination of security controls that you have seen implemented that show how the combination of security factors improve the overall security.

Describe the administrative management practices of separation of duties, job rotation, and mandatory vacations and their role within operations security.

Describe the differences between qualitative and quantitative risk management methods.

Describe the steps in a Business Impact Analysis (BIA). What different loss criteria types can be associated with threats identified during the Business Impact Analysis process?