Describe how the Department of Veteran Affairs organization incorporates program risk and institutional risk in its security program. Offer two examples of both types of risk.

Part 1 – Must be at least 250 words

Policy and answer the following questions.

1.What is APT? Why is it important? How can you protect against APT?

2.What role does the CFO play in Cyber Risk?

Part two must be at least 250 words
An enterprise risk management framework should include both program risk and institutional risk.

1. Define program risk.

2. Define institutional risk.

3. Describe how the Department of Veteran Affairs organization incorporates program risk and institutional risk in its security program. Offer two examples of both types of risk.