Draft a Corporate Information Security Policy $($CISP$)$ that addresses the general approach to be

followed to manage information security in your organisation. This CISP must especially cater for

the five most prominent risks identified.

This CISP must meet all the criteria set in ISO$27002,$ Clause $5.$ Provide a clear policy statement

for each of the five most prominent risks identified to make it clear how the CISP addresses each

of these risks. Include any other relevant policy statements to ensure linking to lower$-$level

secondary level policies.