Information Security Costs

What are the implications and considerations for organizations (companies) that are making information security investments decisions? You must CHOOSE 3 of the following questions and write about them: – Which information assets are likely to be most exposed? – How does one estimate the financial impact of a security incident? – What or who are the most potentially dangerous internal and external threats to an organization? – Why might it be difficult to secure adequate funding for information security? – Physical or operations security might be perceived as more important investments?