Need a response to each topic of at least 250 words, and also 2 follow up questions in relation to the topic. 1. Examine the Information Security (InfoSec) program of your employer or of an organization you are familiar with using the CNSS Security Model that is explained in Chapter 1 of your textbook as your assessment framework. Are there any gaps in the organization’s InfoSec program?2. This week’s readings present the differences, similarities, and linkages among morality, ethics, and laws. Search the Internet or the CSU Global Library (Links to an external site.) to find an example of a recent event that represents an ethical or legal violation.In your initial post, apply what you have learned from the readings for Module 2 materials to describe the relationships between ethics and law in the case that you have found. With respect to your example, was the event a violation of ethics or the law or both? Justify your assessment with material from the text and external sources.3. What items need to be considered when developing an information security strategy for an organization? How can the organization’s security structure vary depending on the grass roots (bottom-up) or senior management (top-down) approach being implemented? Discuss why your approach to security structure helps shape policy.4. Examine how your organization or an organization you are familiar with, implemented its security program training. Compare and contrast that approach with the seven-step methodology for implementing training outlined in your textbook. Discuss any gaps between the approach used by your selected organization and the seven-step methodology.5. Traditionally, security risk assessments have been performed by members of an organization’s IT department, excluding input from other departments. Based on what you have read, is this the most effective method to assess a company’s vulnerabilities? Examine this issue within the context of the textbook’s material on communities of interest and accountability for risk management6. Research the use of Mandatory Access Controls (MAC) and non-discretionary access controls in your organization or an organization with which you are familiar. Which controls work better in your selected organization and why?If your selected organization does not use MAC or non-discretionary access controls, where in the organization do you recommend these controls are needed and why?7. In selecting qualified security personnel, many organizations use recognizable certifications to endow a certain level of competency associated with various security positions. Do you think this practice the best method to find the most qualified candidate? Does security clearance or prior military background make someone an ideal InfoSec job candidate?8. When used together, cryptography and steganography can offer two modes of security. For this discussion, evaluate each method applicability to your organization or an organization with which you are familiar. What are the advantages or disadvantages of each to your selected organization? Which method would you consider to be more commonly used in InfoSec and why?

Read the following scenario:Emma and Isabella attend the front office at an urgent care facility. They have worked together for over five years and enjoy collaborating on projects. As their manager you have asked them to work together to create a team training on effective communication in the workplace. Emma feels that it is important to provide hands-on learning (e.g., role play) while Isabella feels lecture would be the most appropriate format for this team. Emma defends her point by saying that her sister has been a teacher for 10 years, and she has proven that hands-on learning will increase the engagement and likelihood of remembering the training material. Isabella feels that Emma does not account for her 10 years of experience in the medical office and voices her disgust with Emma and her lack of appreciation for her experience. Isabella storms off and leaves Emma to finish the work. Emma approaches the manager and complains that she has been left to complete the training because Isabella refuses to talk or work with her.Write a 265- to 350-word paper that discusses how you would handle the situation and includes the following:Describe the type of conflict illustrated in the scenario.Identify strategies the manager could use to resolve the conflict between Emma and Isabella to create a supportive climate again.Explain how the defensive climate created by the conflict will affect the workplace relationship between Emma and Isabella.Discuss the impact it could have on the other clinic staff and the consumers who use the clinic.Note: Each of these bullet points should be separate sections in your paper you address with details (5 to 7 sentences). Subheadings will help you focus on each topic. For example, heading one "Conflict Illustrated," and second health "Strategies used by Manager," and so forth.Submit your assignment in APA format. For example, double space, 12 pt, in Times New Roman. If you incorporate information from a source, you will need to provide a citation.