1. _________ rule of 80/20 states that security policies and procedures are either acted upon or enforced by 80% of the organization and the remaining 20% is under the scrutiny and circumspection of your security organization.

• Balboa's
• Pareto's
• Alesandro's
• Adrian's

1. A _________ is the overarching reasoning behind or the focus of the actions you wish to have in place.

• Policy
• Procedure
• Responsibility
• Role

1. A __________ is a detailed description of the steps or actions needed to effect a change or maintain a condition.

• Role
• Policy
• Procedure
• Responsibility

1. _________ is the announcement or publication of the P&P's.

• Procedure
• Rollout
• Policy
• Training

1. Explain the purpose of training in relation to policies and procedures. Who is it for? What are some considerations to make?

1. List at least 3 reasons that make it hard to integrate security into a organization.

1. Explain what double marginalization is and list & explain at least one way that solves this issue.