Explain the main objective for organization to deploy an information security policy, and in your own words, briefly discuss the Corporate culture classifications?

Writing a policy document for an organization can be done in two formats, what are they, explain the pros and cons for each one of them?

In your own words, explain the difference between Authorization and Authentication in term of the information security, and provide examples from your daily life with blackboard system.

How does the Denial-of-Service (DoS) attacks may affect the Confidentiality, Integrity, Availability (CIA) model? List two (2) security measures using which an organization prevent the DoS impact.