Answer the following questions Identify the risks, controls and control classification that arise in the following cases.

1. An employee picked up a USB drive in the parking lot and plugged it into their laptop to "see what was on it," which resulted in a keystroke logger being installed on that laptop.

2. Once an attack on the company's website was discovered, it took more than 30 minutes to determine who to contact to initiate response actions.

3. A criminal remotely accessed a sensitive database using the authentication credentials (user ID and strong password) of an IT manager. At the time the attack occurred, the IT manager was logged into the system at his workstation at company headquarters.