Question 2 (7 marks) Due to a recent information systems security breach at Seventh Heaven Inc. (SHI), the company was NOT operational for four days. The board of directors at SHI has requested that management present a corporate security plan at the March board meeting. The report needs to include a proposed business continuity plan, disaster recovery plan, and information on the possible use of hot and cold sites. Required: a) Identify two types of threats that SHI's security plan should consider. (1 mark) b) Identify five key elements of a well-designed security strategy. (2.5 marks) c) Identify the greatest security vulnerability to most organizations. (0.5 marks) d) Explain the difference between a business continuity plan and a disaster recovery plan. (1 mark) e) Explain the difference between a hot site and a cold site. (2 marks)