Q1: Chapter 3 starts with the identification and the introduction of the Principles, and the characteristics of a successful IG program. Identify these Principles, and provide a brief explanation of their importance?
Q2: In order to have a successful IG program, one of the eight (8) Information Risk Planning and Management step is to develop metrics and measure results. Why are metrics required? Briefly provide your explanation.