Principles and Theory of Security Management

question 1. what would make a person credible as a source of information – what could detract from that credibility?

question 2. what are the reasons organizations manage risk? Do you think more organizations are proactive or reactive when it comes to managing incidents – and what steps should they take? Does that make them more proactive?