1.Explain what an information security blueprint is, identify its major components, and explain how it supports the information security program

2.Discuss how an organization institutionalizes its policies, standards, and practices using education, training, and awareness programs

3. Describe what contingency planning is and how it relates to incident response planning, disaster recovery planning, and business continuity plans

4. Explain how policies direct how issues should be addressed and how technologies should be used.

You can use this book Michael E. Whitman, Principles of Information Security, 6th Edition