Q1: Chapter 3 starts with the identification and the introduction of the Principles, and the characteristics of a successful IG program.  Identify these Principles, and provide a brief explanation of  their importance?

Q2:In order to have a successful IG program, one of the eight (8) Information Risk Planning and Management step is to develop metrics and measure results. Why are metrics required?  Briefly provide your explanation.

Use the APA format to include your references.