Information Security Management case question

profiledaven9947