Question $1$

define how an organization is going to

protect its information assets and information systems to ensure

compliance with legal and regulatory requirements; protect the

organization, it's employees, customers, vendors and partners from

intentional and accidental damage, misuse or disclosure; protect the

confidentiality and integrity of information and ensure the availability of

information systems.

Information Security Policies

Government Regulations

Gramm$-$Leach$-$Bliley $($GLBA$)$ Act

ISO $27002$:$2013$