Which of the following acts promote a risk-based policy for cost effective security? Each correct answer represents a part of the solution. Choose all that apply. Response:

The Clinger-Cohen Act mandates federal agencies to use a capital planning and investment control process for IT investments, which includes managing risks and ensuring cost-effectiveness in security. It requires agencies to explicitly consider the return on investment and risk in their IT spending.

The Lanham Act primarily governs trademarks, service marks, and unfair competition in the United States, and does not directly address risk-based IT security policies.

The Computer Misuse Act is a United Kingdom law that addresses computer hacking and unauthorized access, not a U.S. federal act promoting risk-based cost-effective security policies.

The Paperwork Reduction Act (PRA) requires federal agencies to manage information resources efficiently and effectively, including establishing security policies and practices based on a risk-based approach to protect information assets.