A key tenet of the NIST SP 800-53r5 (Security and Privacy Controls for Information Systems and Organizations) specification is that security and privacy requirements are a subset of all requirements that can be imposed on an information system and/or an organization. In other words, when we develop systems/applications for example, we must consider security and privacy requirements as part of overall system requirements. A key tenet of the NIST SP 800-53r5 (Security and Privacy Controls for Information Systems and Organizations) specification is that security and privacy requirements are a subset of all requirements that can be imposed on an information system and/or an organization. In other words, when we develop systems/applications for example, we must consider security and privacy requirements as part of overall system requirements. True False

3. ranga ramasesh is the operations manager for a firm that is trying to decide which one of four countries it should research for possible outsourcing providers. the first step is to select a country based on cultural risk factors, which are critical to eventual business success with the provider. ranga has reviewed outsourcing provider directories and found that the four countries in the table that follows have an ample number of providers from which they can choose. to aid in the country selection step, he has enlisted the aid of a cultural expert, john wang, who has provided ratings of the various criteria in the table. the resulting ratings are on a 1 to 10 scale, where 1 is a low risk and 10 is a high risk. john has also determined six criteria weightins: trust, with a weight of 0.3; quality, with 0.2; religious, with 0.1; individualism, with 0.2; time, with 0.1; and uncertainity, with 0.1. using the factor-rating method, which country should ranga select? why? (2 points)