Who is authorized to change the classification of a document?

What is an example of a security incident?

Of the following, which is the best organization or set of organizations to contribute to compliance?

A non-human threat for computer systems is a flood. In which situation is a flood always a relevant threat?

The company Midwest Insurance has taken many measures to protect its information. It uses an Information Security Management System, the input and output of data in applications is validated, confidential documents are sent in encrypted form and staff use tokens to access information systems. Which of these is not a technical measure?