2.1 Measures for security and policy implementations are so that an enterprise network architecture is built to safeguard data and effectively manage privacy. The principle of least privilege is a potential application in this scenario. Explain the principle of least privilege in access management. (10 Marks) 2.2 Think of an organisation you know and the sort of information it may hold for business purposes. Explain a single reason why access to data or information must be protected and confidential. Your reason must revolve around cost and reputation damage when access to data is wrongly granted. (5 Marks) [Sub Total 15 Marks]