Problem:
Please answer of both the questions:
Question 1- What is the primary purpose of the 2013 Cybersecurity Executive Order? 2. Select two of the Threats and Consequences and describe/explain what type of policy(ies) can help protect an organization against the threats.
Question 2- Answer the following: In terms of role of policy:
Part 1- What is the importance of "policy" with respect to information security program management?
Part 2- What is the role of policy enforcement?
Part 3- What are the possible effects of "lack of" policy enforcement?
Part 4- Research and provide details of a recent security incident that may have resulted in lack of policy or policy enforcement. Be sure to state the possible policy violation.
Part 5- What happens when technology moves faster than policy? And has anyone experienced this first hand.
Could someone help to explain the answer of these questions.