Problem: You have just been employed by a SME organization as the Chief Information Security Officer (CISO). Assess security risks, threats and vulnerabilities to the organization and implement appropriate information security protection mechanisms by analyzing requirements, plans and IT security policies.