1a. What is the relationship between incident management and crisis management? Cite source(s) used.

1b. In your professional judgement, do incident response plans make reference to crisis management and have associated escalation procedures, or do incident response plans not address crisis management? Why or why not? Cite source(s) used.

2a. The book makes reference to IT auditors needs "Familiarity with Technology Is Key to Effective IS Audit." Why is it so important that IT auditors have or need a familiarity with technology for there to be an effective IS audit?

2b. Why is it important for an Information Assurance professional to have a balanced approach in analyzing technology, people and process? Cite source(s) used.