Problem
i. Briefly describe the difference between a risk assessment and an IT security audit.
ii. Some IT security personnel believe that their organizations should employ former computer criminals who now claim to be white hat hackers to identify weaknesses in their organiza- tions' security defenses. Do you agree? Why or why not?
iii. What is predictive coding? How is it different from doing key word searches on documents? What are the key issues to weigh when considering use of predictive coding?
iv. Do you believe it is acceptable for a website to assume that consumers are okay with any changes the site makes to it privacy policy unless they explicitly take action to opt out? Explain your reasoning.