A regional bank needs to rewrite information security policies. The bank has heard of ISO 17799 and would like to use it as a framework for the

A regional bank needs to rewrite information security policies. The bank has heard of ISO 17799 and would like to use it as a framework for the revised policies. 1. Where do you begin the project?2. Would you prepare a list of questions based on the ISO 17799 to guide understanding what this bank can adhere to as policy?3. Which ISO 17799 domains and sections would you include and why?