Question $4($Marks: $30)$

Theme IT security is an umbrella term that includes network, internet, endpoint, API,

cloud, application, container security, and more. It's about establishing a set of

security strategies that work together to help protect your digital data. Not so

long$-$ago IT security was a checkpoint at the end of a development cycle. It was

slow. Businesses today are looking for ways to create an integrated security

program so that they can adapt faster and more efficiently. Think of it as built$-$in

security, rather than bolted on

Q$\mathrm{.}4\mathrm{.}1$ Using examples, explain the differences between a policy, a standard, and

practice?

$(7)$

Q$\mathrm{.}4\mathrm{.}2$ Using a suitable example, describe when and how the Incident Response Plan

$($IRP$)$ is used?

Q$\mathrm{.}4\mathrm{.}3$ Describe when and how the Disaster Recovery Plan $($DRP$)$ is used? $(6)$

Q$\mathrm{.}4\mathrm{.}4$ Describe when and how Business Continuity Plan $($BCP$)$ is used? $(6)$

Q$\mathrm{.}4\mathrm{.}5$ Give five elements of a business impact analysis.