Information Security Management

1. Any approach to secure information based on best practice is difficult to realize. Instead, it is more practical to settle with an optimal framework. Explain this statement.

2. Discuss the evolution of organizational structures and how it affects information security management.

3. In information security management we can never totally automate administrative tasks related to security. Discuss why.

4. Discuss how the evolution of technical infrastructures affects information security management.

5. One of the problems in security management is the lack of awareness of the underlying risks and how to deal with them, such as executive management may not understand the extent to which the organization as a whole is exposed to risk. How is this so?