Q1: Chapter 3 starts with the identification and the introduction of
the Principles, and the characteristics of a successful IG program.
Identify these Principles, and provide a brief explanation of their
Q2:In order to have a successful IG program, one of the eight (8)
Information Risk Planning and Management step is to develop metrics and
measure results. Why are metrics required? Briefly provide your