1. The purpose of identifying assets and inventory is so the value of the company can be accurately reflected. Assets and inventory need to be known for tax purposes. The organization must have detailed knowledge of what they need to protect.

2. The purpose of an asset classification is so that an organization can determine risk to its assets.

3. The e-commerce server might be considered a critical value because it might be what the company runs under and it the server crashes, everything including all customers’ purchases and transactions may be lost and that will cause a data leak, which will destroy the company.

4. Because these are things that can be damaging to not just an organization, but to individuals as well.

5. Some examples of security controls for recent compliance law requirements are tokens, smart cards, and biometrics.

6. You can properly classify what might normally be a low priority a high-risk classification because of the data that’s on it.

7. Frist setup securities policies and software to prevent SQL injection so the database can’t be compromised. Then have a schedule policy to keep the database to only be online when in use. Limited access to database, so only certain people can access.

8. In order to ensure the confidentiality of customer privacy data throughout the Mock IT infrastructure, both of the LANS and WANS must be overlooked and secured when it is connecting to multiple cities. This will ensure that there is a secure connection between all of the users and the corporation.

9. Your organization can document all previous types of risks, threats, and liabilities to ensure future protection that attacks in occurred in the past should not happen again. There will be more beefed up security measures because the organization will already know how to take care of the problem.

10. True