You recently accepted a new position as an information security manager. As part of your new role, you should identify the relationship between risks and an organization's strategic goals