This service is designed for organizations that either lack an information security program or has one that is in need of improvement. It includes:

1. assistance in identifying missing elements of a security program required to meet business goals for security
2. mapping security program elements to organizational structure
3. assistance in interviewing candidates for information security managers and staff
4. requirements identification and work activity breakdown for critical security or business continuity projects
5. identifying metrics that will demonstrate whether or not the newly developed program is achieving goals