Corporate IM presents multiple concerns to enterprise IT. Which of the following concerns should Jane, the IT security manager, ensure are under control? (Select THREE).

Authentication is a general IT concern applied universally across all systems and is not a risk uniquely introduced or elevated by corporate IM usage.

IM clients can be used to send proprietary files, source code, or confidential data outside the organization, creating a data leakage channel that bypasses email DLP controls.

Many industries have compliance requirements (HIPAA, SOX, PCI-DSS) that mandate logging and archiving of electronic communications, and corporate IM must be governed accordingly.

IM platforms support file transfers and URL sharing, making them a viable vector for malware delivery through infected attachments or links to malicious sites.

Non-repudiation is an important security property but is not among the primary risk categories that IM specifically introduces compared to other communication channels.

Network loading is an operational and capacity concern, not a security risk that an IT security manager would classify as a primary IM security concern.