Dear Sir, Attached please find my assignment for your consideration. I have also attached the previous assignment as model CASE 8-1Assessing Change Control and Change Management

Read the article Security Controls that Work by Dwayne Melancon in the 2007 Issue, Volume 4 of the Information Systems Control Journal (availablehttp://www.isaca.org/Journal/Past-Issues/2007/Volume-4/Pages/Security-Controls-That-Work1.aspx). Write a report that answers the following questions:

• 1.What are the differences between high-performing organizations and medium- and low-performing organizations in terms of normal operating performance? Detection of security breaches? Percentage of budget devoted to IT?
• 2.Which controls were used by almost all high-performing organizations, but were not used by any low- or medium-performers?
• 3.What three things do high-performing organizations never do?
• 4.What metrics can an IT auditor use to assess how an organization is performing in terms of change controls and change management? Why are those metrics particularly useful?