Discuss THREE (3) criteria of Span of Control.

Identify TW0 (2) compliance standard that can be applied in data classification.

Discuss TWO (2) level of information classification and provide ONE (1) example each.

List THREE (3) goals for security policy.

Describe THREE (3) key elements of security policy.

Identify FIVE (5) suitable criteria to be inserted in password policy.

Define the Risk Management and Risk Assessment.

Explain TWO (2) Risk Treatment.

AI Tech Sdn Bhd is in process to identify the risk that their company might be exposed to. Therefore, there are steps that should be taken to perform the risk identification. Determine the THREE (3) steps.

Identify FOUR (4) advantages for organization if the company is ISMS-Certified.

Describe FOUR (4) responsibilities that should be done to protect the assets in a company.

Physical and environmental security is really important towards unauthorized access. Relate THREE (3) threats that are suitable towards this security.

Demonstrate FOUR (4) policy statement for access control to prevent unauthorized access into the building. [8 marks]