Three students got together and created a Web design and Web hosting company called HTMLTips.net. They will be creating Web site for theircustomers, from simple "Hello World" pages to full-fledged e-commerce solutions. One student is the technical guru, the second is the marketing genius, and the third is in charge of running the company. The students also have five Web developers working for them as contractors on a per-project basis. They need to an information security policy document.

1. Who do you think should be the policy owner?

2. Who do you think should be the policy authority?