Week 5 Discussion Post

Respond to the following in a minimum of 175 words: 
Based upon what we learned from our required learning activities from this week:

How are the various federal, state, and local legal and regulatory environments addressed through managerial controls in an information systems security plan?
Identify at least three components of an organizational framework for security and control and describe how public entities might use these components to comply with the legal and regulatory framework? 

Needs to be in APA format with one reference.