Some security measures are optional. Other security measures must always be implemented. Which measure(s) must always be implemented?

What is an example of a good physical security measure?

You work in the IT department of a medium-sized company. Confidential information has got into the wrong hands several times. This has hurt the image of the company. You have been asked to propose organizational security measures for laptops at your company. What is the first step that you should take?

An airline company employee notices that she has access to one of the company's applications that she has not used before. Is this an information security incident?

You work for a large organization. You notice that you have access to confidential information that you should not be able to access in your position. You report this security incident to the helpdesk. The incident cycle isinitiated. What are the stages of the security incident cycle?