help please fast

1. List and describe the three challenges in shaping policy. 2. Describe the bull's-eye model. What does it say about policy in the InfoSec program? 3. Is policy considered static or dynamic? Which factors might determine this status? 4. What is the purpose of an EISP? 5. List and describe four elements that should be present in the EISP. 6. Where should an InfoSec unit be placed within an organization? Where shouldn't it be placed? 7. How does training differ from education? Which of the two is offered to a larger audience with regard to InfoSec? 8. Define "project management." Why is project management of particular interest in the field of InfoSec? 9. What is a work breakdown structure (WBS) and why is it important? 10. List and describe the various approaches to task sequencing. Do your own independent research and answer the following questions. Each answer should be within half a page (Single spaced, times Roman, 12 font). (Each question =25 points, Total =50 ) 1. Describe three approaches to policy development which is best suited for use by a smaller medical organization (such as a testing laboratory clinic) and why? If the target organization were very much larger, (say a large hospital in a city) how would the policy development differ and why? 2. Develop a potential InfoSec policy document for the small medical clinic with all the relevant components for security policies. You may assume certain attributes about your fictitious organization for the sake of ensuring policy details