address the following:

1. Three important measures that are important to maintain the information security system once it is in place.
2. Discuss the difference between law and ethics,.What connection/role do you see in terms of ensuring information security?
3. Research the Sarbanes-Oxley Act of 2002 and discuss how it has impacted information security in an organization.