ethics in information technology

Part 1. An alarming number of identity theft incidents in the telecommunications industry can be traced back to data breaches involving large databases of personal information. Data breaches are sometimes caused by hackers breaking into a database, or by carelessness or failure to follow proper security procedures by the employees of these companies. You were hired as an information security analyst for a Telecom company, and you have been tasked with assessing how well your company is prepared for a major data breach of the customers' database containing some 30 million records with names, addresses, passwords, credit card numbers, and payment history. The goal is to minimize the potential impact of a hacker getting access to this data and to avoid expensive class action lawsuits from affected customers. 1. How would you proceed with this audit? 2. What sort of measures would you look for or recommend