1. Why is administrative management so important when it comes to security operations?

2. What is collusion? How can we prevent or place preventative controls to help stop or mitigate collusion

3. Should the information technology department and information security department operate separately? Or should they be in the same department? Why or why not?

4. What are the differences between information technology governance and information security governance? Are their purposes different? If so are they leading towards the same outcome? What would that be?