Which of the following factors does NOT contribute to the value of data for an organisation?

In which order is an Information Security Management System set up?

A well-executed risk analysis provides a great deal of useful information. A risk analysis has four main objectives.
What is not one of the four main objectives of a risk analysis?

You work in the office of a large company. You receive a call from a person claiming to be from the Helpdesk. He asks you for your password.
What kind of threat is this?

Implement plan on a test basis - this comes under which section of PDCA