use the link below and other sources and answer the following questions:1. what are the differences between high performing organizations and the medial and low performing organizations in terms of normal operating performance? Detection of security breaches? Percentage of budget devoted to IT?2. which controls were used by almost all high performing organizations, but were not used by any low or medium performers?3. what three things do high performing organizations never do?4. what metrics can an IT auditor use to assess how an organization is performing in terms of change controls and change management? why are those metrics particularly useful?http://www.isaca.org/Journal/archives/2014/Volume-2/Pages/Internal-Audits-Contribution-to-the-Effectiveness-of-Information-Security-Part-1.aspx
