a. In developing an IT security plan, what should a company do first? b. What are the major categories of driving forces that a company must consider for the future? c. What should the company do for...

a. In developing an IT security plan, what should a company do first? b. What are the major categories of driving forces that a company must consider for the future? c. What should the company do for each resource? d. For what should a company develop remediation plans? e. How should the IT security staff view its list of possible remediation plans as a portfolio?