Discussion - S1 - Access Control

==============================================================

Discussion 1: (Access Control)

============================================================== 

Q) How are access control policies different between industries? 

Note: 500 Words, 3 References 

 https://books.google.com/books?id=YIOAuSW0GAcC&printsec=frontcover&dq=Chapple,+M.,+Ballad,+B.,+Ballad,+T.,+%26+Banks,+E.K.+(2014).+Access+control,+authentication,+and+public+key+infrastructure+(2nd+ed.).+Burlington,+MA:+Jones+%26+Bartlett+Learning.&hl=en&sa=X&ved=2ahUKEwjKjuKb-NPkAhXJtp4KHcOpC-IQ6AEwAXoECAEQAg#v=onepage&q&f=false 

==============================================================

Discussion 2 : (ERM)

==============================================================

 Chapter 12 presented the approach Intuit uses to measure the effectiveness of their ERM, and chapter 15 presented the process the City of Edmonton employed to develop and deploy their ERM. 

You are an ERM consultant, retained by Intuit to re-implement their ERM. They have decided to start over and develop a new ERM for their current organization. Would you recommend that the base their new ERM on PM2 Risk Scorecard or ISO 31000? Explain why you would choose one over the other. 

Note: 500-600 Words, 3 References.