Risk management strategies why must periodic records be part of the process?

What are the possible security vulnerabilities when developing a plan of action and milestones?

writing organization policy. Name of the policy (Security Awareness and Training Policy) 2. Policy Definition: 3. Purpose 4. Scope 5. Target Audience or Applicability 6. Objectives: Information security is deemed to safeguard three main objectives: • Confidentiality - data and information assets must be confined to people authorized to access and not be disclosed to others; • Integrity - keeping the data intact, complete and accurate, and IT systems operational; • Availability - an objective indicating that information or system is at disposal of authorized users when needed. 7. Standard 8. Roles and Responsibilities 9. Procedures and Guidelines 10 Compliance and Enforcement 11. Non-Compliance and Exceptions 12. References

Please explain why it's beneficial to do a security risk analysis.

Please describe in two paragraphs the connection between the following concepts. Management of Security Procedures vs. People Security Procedures?

Describe the role of risk assessment in the development of continuity plans.

Explain the role of risk assessment in the development of a continuity plan and provide examples of potential IT-related risks.