Why is security primarily a management issue not a technological issue? Also provide some specific bulleted points on what you would include in a security plan if you were the Information Technology Director of a small firm.must include 3 references.