Need a discussion to post on Business Drivers for Information Security Policies.

I need support with this Computer Science question so I can learn better.

It is impossible to eliminate all business risks. In fact, you would not want to. Taking risks and making a return on those risks are essential to business. How you manage that risk is what makes businesses successful. A good policy can reduce the likelihood of risk occurring or reduce its impact. A business must find a way to balance a number of competing drivers.

  • Why are business drivers important? Explain
  • How do business drivers impact operations security?
  • What is the difference between business risk exposure and business liability?
  • Describe the relationship between business risks and security policies.