Security Infrastructure
-  Management commitment
 -  Resources to back security policies and procedures
 -  Staff dedicated to security tasks 
 -  Security mission statement 
 -  Security awareness training program 
 -  Security policies and procedures 
	
	-  Clearly defined
	
 -  Implemented 
	
 -  Documented 
	
 -  Supplied to everyone within your organization 
	
 
 -  Strong flow of information to and from the appropriate groups 
 -  Security incident response team 
 -  External and internal security perimeter controls
 -  Host and network based security auditing tools