Today, the security of an organization’ s information patrimony is no longer a question, but an imperative. A company’s security policy embodies the strategic vision at the heart of the business and its relationships with the outside world, as well as the financial markets’ appreciation of how it is managing risk. Nevertheless, it remains a major challenge for the majority of IT departments, because there is still so much left to be done.