Scenario: An organization has made a decision to address Information Security formally and consistently by adopting established best practices and industry stan...