Certain IT security professionals argue that organizations should consider employing former computer criminals in order to identify and address potential vulnerabilities in their security systems. Do you agree with the statement or not? Please provide a rationale for your answer.

Unknown are the reasons that contributed to the development of computer security into the current era of information security. Explain?

To learn more about your institution's security rules, look them up on the intranet or website. Is there a corporate security policy somewhere? Where have you come across security rules that are tailored to address a particular problem? What agency or department is in charge of issuing or coordinating all of these policies, or are they dispersed across the organization? Use the framework provided in this chapter to determine whether or not the policies you found in the preceding exercise are complete. What are the omissions in these areas?

Which tool or technique do you believe is most effective for finding security flaws? Why?

Some information technology security professionals feel that their firms should hire former computer criminals to find security flaws in their organisations' defences against cybercrime. Do you agree with this statement? What is the reason for this or why is it not?

Hi , please assist with the following question below. What documents are available from NIST Computer Research Center, and how can they support the development of a security framework?