Problem
1. Organizational security objectives identify what IT security outcomes are desired, based in part on the role and importance of the IT systems in the organization. List some questions that help clarify these issues.
2. List and briefly define the four approaches to identifying and mitigating IT risks.