You have just been hired as an Information Security Engineer for a large

You have just been hired as an Information Security Engineer for a large, multi-international corporation. Unfortunately, your company has suffered ;multiple security breaches that have threatened ;customers’ trust in the fact that their confidential data and financial assets are private and secured. Credit-card information was compromised by an attack ;that infiltrated the network through a vulnerable wireless connection within the organization. The other breach was an inside job where personal data was stolen because of weak access-control policies within the organization ;that allowed an unauthorized individual access to valuable data. Your job is ;to develop a risk-management policy that addresses the two security breaches and how to mitigate these risks.