Assessment

  Q1: Chapter 3 starts with the identification and the introduction of the Principles, and the characteristics of a successful IG program.  Identify these Principles, and provide a brief explanation of  their importance. 

Q2: In order to have a successful IG program, one of the eight (8) Information Risk Planning and Management step is to develop metrics and measure results. Why are metrics required?  Briefly provide your explanation and offer up an example of a metric you might track. 

Can anyone help me out with these 2 questions.