Insightful document Alice. Just wondering: what's kictanet's governance model/approach? I ask because in the recent past we have received some very useful recommendations. It is not clear who takes responsibility/accountability to make them happen? Baadaye.   ---------------------------------------------------------------------------------------------- Matunda Nyanchama, PhD, CISSP; mnyanchama@aganoconsulting.com Agano Consulting Inc.;  www.aganoconsulting.com; Twitter: nmatunda;  Skype: okiambe ---------------------------------------------------------------------------------------------- Be prepared to face ICT Security failures & know how to respond when they happen! Call: +1-888-587-1150 or info@aganoconsulting.com  ---------------------------------------------------------------------------------------------- "A bus station is where a bus stops. A train station is where a train stops. On my desk I have a workstation…" - Anonymous ----------------------------------------------------------------------------------------------- This e-mail, including attachments, may be privileged and may contain confidential or proprietary information intended only for the addressee(s). Any other distribution, copying, use, or disclosure is unauthorized and strictly prohibited. If you have received this message in error, please notify the sender immediately by reply e-mail and permanently delete the message, including any attachments, without making a copy. Thank you.