Privacy considerations shape asset protection programs by defining how data is collected, stored, accessed, and monitored. In modern organizations, protecting assets includes safeguarding information assets, and privacy requirements—laws, regulations, and stakeholder expectations—drive how those assets are safeguarded. The option that emphasizes shaping data collection, storage, access, and monitoring to comply with laws and maintain trust is the best fit because privacy rules dictate data minimization, purpose limitation, retention, and secure handling; these principles influence data governance, access controls, encryption, monitoring practices, and incident response. When asset protection programs align with privacy, they reduce the risk of regulatory penalties and reputational damage while enabling effective oversight and threat detection. The other choices miss the mark: privacy is not irrelevant to asset protection; it extends beyond marketing; and it does not require sharing all data with third parties—sharing is typically restricted or controlled to protect privacy.

The core concept is the PDCA cycle, a continuous improvement loop used across ISO management system standards. The idea is simple and universal: plan what you will do, implement it, check the results, and act to improve based on what you learned. The best answer presents both the full name and the acronym—Plan-Do-Check-Act cycle (PDCA)—which mirrors how ISO describes this cycle in its standards. This phrasing aligns with ISO terminology and reinforces that the approach applies to management systems in general, not just a single domain. A version that uses only the four words is equivalent in meaning but lacks the explicit reference to the PDCA shorthand, and the option that adds “for quality” narrows the concept to quality alone, which isn’t the exclusive scope of ISO management systems.

Fraud is intentional deception used to unlawfully take someone else’s property. The crucial element is deception—misrepresenting or concealing facts to induce the owner to part with their property, with the intent to deprive them permanently. That makes this definition the best fit because it explicitly includes both the deceit and the purpose of theft. The other scenarios describe actions that don’t hinge on deceit: taking by force amounts to robbery, while unauthorized borrowing or temporary taking without permission may be wrong or unlawful, but they lack the deceptive element required for fraud.

Insurers are grouped by the type of risk they cover: property risks and liability risks. Property insurance protects physical assets like buildings, contents, and equipment from damage or loss. Liability insurance covers the financial consequences of harming others or their property, including legal defenses and settlements. This two-way split captures the two broad exposure types risk managers focus on: damage to owned property vs. legal/financial responsibility to others. Life insurance and workers’ compensation are separate lines, while casualty is often used interchangeably with liability, but the standard high-level pair is property and liability.

FMLA leave eligibility rests on two requirements: tenure and hours worked. An employee must have been employed by the employer for at least 12 months and must have accumulated at least 1,250 hours of service in the 12 months immediately prior to taking the leave. Hours are typically the actual time worked, not just total time with the company, and paid time off may count only if the employer counts it as hours of service. The other options miss one or both of these thresholds. Therefore, the rule requiring 12 months of employment and 1,250 hours in the prior year is the correct one.