Information security is important -- A global roadmap for security -- Adapting best practice: tailoring a solution that fits -- Defining the company's executive roles -- Defining the company's functional security roles -- Defining the corollary roles for security -- The data security competency -- The digital forensics competency -- The enterprise continuity competency -- The incident management competency -- IT security training and awareness -- Securing the IT systems operations and maintenance function -- Network and telecommunications security -- Personnel security -- Physical security -- Procurement -- Legal and regulatory compliance -- The risk management competency -- Strategic management -- System and application security -- Appendix A. Operating scenario: humongous holdings.