What form of attack against an employee has the MOST impact on their compliance with the organisation's "code of conduct"?

The policies, processes, practices, and tools used to align the business value of information with the most appropriate and cost-effective infrastructure from the time information is conceived through its final disposition.
Which of the below business practices does this statement define?

When considering the disposal of confidential data, equipment and storage devices, what social engineering technique SHOULD always be taken into consideration?

When an organisation decides to operate on the public cloud, what does it lose?

Which types of organisations are likely to be the target of DDoS attacks?