Discuss what makes a successful information security awareness program and how a security awareness program can be one of an organization's most powerful protection strategies.

As you know, every company should have some security standards and policies. What are some of the policies that your company has to protect its system and data?

What's data value mean? How does a company determine its data value and based on what factors/aspects?

What are some of the security areas that need to be protected? How does the security toolbox concept relate to them?

Mention some of the technologies that are used by businesses to protect their data?

What do you think of e-mail observation by companies on their employee's communication? Is this considered an invasion of an employee's privacy?

Every business may have internal and external security threats. What are some of the internal security concerns that a company can face and why are they greater than the threats from the outside?