Data classification and handling policies and risk management policies

Data sustains an organizations business processes and enables it to deliver products and services.  Stop the flow of data and for many companies, business comes quickly to a halt.  Data drives the economy, and if the loss of data lasts long enough, the viability of an organization to survive may come into question.

1. What is the relationship between QA/QC and risk management?

2. What is the significant difference between quality assurance & quality control?

3. Why are policies needed to govern data both in transit and at rest (not being used – accessed)?