a) Describe the relationship between the information security organization and the business on one hand, and the relationship between the information security organization and the line organization on the other. When describing these relationships, strive to demonstrate the added value of an information security organization.