Backup media is kept in the same secure area as the servers. What risk may the organisation be exposed to?

As a new member of the IT department you have noticed that confidential information has been leaked several times. This may damage the reputation of the company. You have been asked to propose an organisational measure to protect laptop computers. What is the first step in a structured approach to come up with this measure?

Which of the following does a lack of adequate security controls represent?

A well-executed risk analysis provides a great deal of useful information. A risk analysis has four main objectives.
What is not one of the four main objectives of a risk analysis?

In acceptable use of Information Assets, which is the best practice?