Secure software design

1,At what level the security policy should be developed?

2,Why is the cloud of concern from a security point of view?

3,Name and explain the mitigation methods to control the employee threats?

4,Why are the world wide web and internet have so much concern for the security?

5,Explain the difference between incident response plan, dissaster preparedness plan and the business continuity plan?