- List five types of security policy directives often published by organizations.

- Summarize the steps in a typical change control process

- Identify four roles and/or job titles associated with information security management.