a. What are application controls and general Controls? 3 marks

b. Explain the difference between Discretinary and Mandatory Information using appropriate examples. 3 marks

c. In 2017, a dating website was hacked. The group responsible for hacking copied personal information about the site's user base and threatened to release users' names and personally identifying information if the site was not immediately shut down. Detail 4 steps an organisation can take to protect its data from unauthorised use and distribution, including why this would have minimised the risk of this hack occurring.