You are to develop each of the below following sub-topics.Make sure you are sufficiently specific in addressing each area.

1.Often,attackers will craft email attacks containing malware designed to takeadvantage of the curiosity or even greed of the recipients. Imagine that themessage of an email you received from a coworker is “See our managers’ salariesand SSNs” instead of “Funniest joke you’ll see today.”If such an email came in, what would be thebest action to take? Support your answers with information and examples from yourexperiences.

2.Thebest way to defend your systems from attack is to know as much, if not more,about your system and its vulnerabilities than potential attackers know. Youmust know where and how they’ll likely attempt to compromise your systems.Discuss the moves that may be taken to compromise a company’s system. Supportyour answers with information and examples from your experiences.

3.Whileno single set of rules or guidelines is the “best” for any specificenvironment, there are general best practices that should result in a secureenvironment. What best practices would you follow for implementing aninformation security program at your organization? Support your answers withinformation and examples from your experiences.

4.Ifan organization must evaluate various information assets for risk management,which vulnerability should be evaluated first for additional controls? Whichshould be evaluated last? Support your answers with information and examplesfrom your experiences.

The overall papershould be 2-3 pages long with intext citations and a minimum of one referencefor each sub-topic.