isol 531 operation security

1. What is the relationship between QA/QC and risk management?

2. What is the significant difference between quality assurance & quality control?

3. Why are policies needed to govern data both in transit and at rest (not being used – accessed)?