A CISO has recently joined an organization with a poorly implemented security program.

A security organization that is adequately staffed to apply required mitigation strategies and regulatory compliance solutions

A clear set of security policies and procedures that are more concept-based than controls-based

A complete inventory of Information Technology assets including infrastructure, networks, applications and data

A clearly identified executive sponsor who will champion the effort to ensure organizational buy-in