Answer the following questions:

1. What are the five tasks required to get ready for a risk assessment? Explain each one in your own terms and why the task is important.

2. Discuss the threats associated with privileged user accounts?

3. Identify the risks at the Organizational level, business process level and information system level.

4. Base on the risks identify, recommend the information system policies that would be required. You do not need to write the policy in detail, simply provide the title and one sentence describing the policy.