1. When building a policy framework, what information systems factors should be considered?
Why are these factors important?
2. What is the difference between risk appetite and risk tolerance?
3. Describe the difference of risk appetite among different types of organizations.
4. Describe some of the differences between a flat and hierarchical organization.