2 questions on one page

QUESTION 1 (100-150 words) : What is the purpose of including information systems security as part of an organizational security plan? What actions need to be taken to ensure that proper security measures are included in the design of the security plan as it applies to information systems? 

QUESTION 2 (100-150 words): What recommendations would you make to combat the risks and threats presented by information system and network breaches as it applies to an organization's security plan? Explain.

(seperate each question with answer. no plagiarism)

THANKS!!!