Question 1 Write about

1. Potential Risks to Information Systems
2. Factors to be addressed for making information systems more secure

Question 2 Write about the following phases with respect to System development Life Cycle

1. Initiation Phase
2. Development / Acquisition Phase

Question 3 Write about

1. Metric Types
2. Metrics Development and Implementation Approach

Question 4 Write about various security planning roles and responsibilities

Question 5 Write about

1. Risks in Software Project Management
2. Risk Management Approaches

Question 6 With respect to Incident Response, explain

1. Preparing for Incident Response
2. Preparing to Collect Incident Data