<orderedlist>
<listitem><para>Who has access to information systems that store financial data.</para></listitem>
- <listitem><para>How personal and finacial information is treated among employees and business
+ <listitem><para>How personal and financial information is treated among employees and business
partners.</para></listitem>
<listitem><para>How security vulnerabilities are managed.</para></listitem>
<listitem><para>Security and patch level maintenance for all information systems.</para></listitem>