 Most networks are at least connected to the internet, which could be a point of vulnerability.These are critical questions in protecting networks.In assessing the need for a client to implement encryption policies for their organization, the Auditor should conduct an analysis of the client's risk and data value.