1.Provide examples of business concerns describing the Preventive, Detective and Corrective Action with reference to Internal Control.

2. Adisaster recovery plan(DRP) is a documented process or set of procedures to execute an organization'sdisaster recoveryprocesses andrecoverand protect a business IT infrastructure in the event of adisaster. It is "a comprehensive statement of consistent actions to be taken before, during and after adisaster".Describe a Disaster Recovery Plan (DRP) for Information Technology of a Saudi Business Concern.

3. Personal information about customers is collected, used, disclosed, and maintained only in compliance with internal policies and external regulatory requirements and is protected from unauthorized disclosure. With reference to Privacy Concern how would you deal with SPAM and Identify Theft problem of your business organization?