Management of Information Security 4th Edition by Michael Whitman ,Herbert Mattord

Exercise 1

Mike and Iris were flying home from the meeting. The audit committee's reaction had not been what they expected.
"I'm glad they understood the situation," Mike said. "I'd like you to start revising our risk management documentation to make it a little more general. It sounds like the board will want to take our approach company-wide soon."
Iris nodded and pulled out her notepad to make a to-do list.
What will Iris have on her to-do list