For the answers that are already provided for these questions:
Why is Information is a valuable asset to a company? ?
Why would Identifying vulnerabilities be a valuable first step?
What is an organization security policy?
Who are regulatory organizations? (List at least 3)
What are the sources for these answers?