1.Why must cybersecurity be designed into a system as opposed to be added after a system is created? Discuss how to make legacy systems secure given this principle.

2. What are the operational questions that must be answered by cybersecurity? Discuss other important operational questions and considerations and why they also might be important to answer. 3. Why is cybersecurity particularly challenging to a defender compared to physical security? What does asymmetric threat mean and how does it apply? Discuss the implications of asymmetric threat to the problem of architecting an effective defense.