help please fast

1.List and describe four elements that should be present in the EISP.

2.Where should an InfoSec unit be placed within an organization? Where shouldnt it be placed?

3.How does training differ from education? Which of the two is offered to a larger audience with regard to InfoSec?

4.Define project management. Why is project management of particular interest in the field of InfoSec?

5.What is a work breakdown structure (WBS) and why is it important?

6.List and describe the various approaches to task sequencing.

1.Describe three approaches to policy development which is best suited for use by a smaller medical organization (such as a testing laboratory clinic) and why? If the target organization were very much larger, (say a large hospital in a city) how would the policy development differ and why?

2.Develop a potential InfoSec policy document for the small medical clinic with all the relevant components for security policies. You may assume certain attributes about your fictitious organization for the sake of ensuring policy details.