Security and VPN in an Organization

1. Who is ultimately responsible for the security of information in an organization?
2. What are the disadvantages of using a VPN instead of a leased line?
3. If a hacker hacks into a network, copies a few files, defaces the Web page, and steals credit card numbers, identify the different threat categories encompassed by this attack?
4. What do VPNs do that firewalls cannot do?

Need 2 page document with references and follow APA style