I need help with this question:

• What steps would you take at your current or future job to ensure that personal information, such as human resources or customer information, is not compromised?
• Do companies have a responsibility to disclose identity-theft breaches that occur in their organizations?
• Present a strategy for educating a user about avoiding e-mail risk without saying, "Do not open an e-mail from someone you do not know." This has been said many times and has failed. Take the time to think outside of the box about how you can get people to think before they act with e-mail.