In which order is an Information Security Management System set up?

The following are purposes of Information Security, except:

A hacker gains access to a web server and reads the credit card numbers stored on that server. Which security principle is violated?

Stages of Information

In order to take out a fire insurance policy, an administration office must determine the value of the data that it manages.
Which factor is [b]not[/b] important for determining the value of data for an organization?