Question: Offer additional information for the following text: "COBIT 5 is a tool used for IT and businesses for the security and governance of data and information (Suer & McMonagle, 2017). The approach of the COBIT 5 process starts with IT and the business searching to increase their security and have a protection plan that IT customizes to meet the business's needs. COBIT 5 focuses on 6 principles according to Suer & McMonagle (2017). The principles are as followed:

1) Proactive, not reactive; preventive, not remedial,

2) Privacy as the default setting,

3) Privacy embedded into the design,

4) End-to-end Security,

5) Visibility and transparency (on how data and information is monitored) and

6) Respect for user privacy.

The risks that companies face that are addressed by COBIT 5 are data leakage (loss or breach), inadvertent employee mistakes, incidents related to employee's personal devices, cloud computing, cyber-attacks, external hacking and disgruntled employees (Anonymous, ISACA Issues COBIT 5 for Information Security; Survey: Data leaks, employee error, BYOD top list of security threats, 2012). COBIT 5 helps manage all these security issue to better protect enterprises or businesses.

A large part of the successfulness to COBIT 5 is its flexibility to adapt continually to the goals of the enterprises (Thomas, 2014). Another strategy used in COBIT 5 is that it is very user-friendly for businesses in addition to its being an effective and relevant tool (Anonymous, ISACA Issues COBIT 5 for Assurance New Guide Helps Enterprises Perform Business-relevant Assessments, 2013)." Offer additional information( 200 word) with a couple of references (Other than the one listed on the text).