1. Management is responsible for implementing information security to protect the ability of theorganization to function. They must set policy and operate the organization in a manner that complies with the laws that govern the use of technology. Technology alone cannot solve information security issues. Management must make policy choices and enforce those policies to protect the value of the organizations data

2 Data is important to an organization because without it an organization will lose its record of transactions and/or its ability to furnish valuable deliverables to its customers. Other assets that require protection include the ability of the organization to function, the safe operation of applications, and technology assets.

3. General management and IT management are responsible for implementing information security

4. The implementation of networking technology has created more risk for businesses that use information technology because networks are now connected to the internet and other networks external to the organization. This has made it easier for people to get access to business’s data

5. Information extortion occurs when an hacker steals information from a computer system and demands compensation for its return or for an agreement not to disclose it. For example, if a
Hacker r gains unauthorized access to a CEO’s computer and discovers unethical business transactions , he could then blackmail the CEO into giving him money in exchange for keeping the data from the public eye.. This causes not only a monetary loss for the CEO, but also a loss of security.

6. Employees constitute one of the greatest threats to information security because employee mistakes can lead to the outside access of classified data, entry of incorrect data, accidental deletion or modification of data, the storage of data in unprotected areas, or they could