Introduction The first step to improving a company’s information security program is establishing a baseline of what that program looks like and where it is lacking. This means understanding the current state of your organization’s data, assessing the risk of losing that data, and identifying what could be done to prevent such a loss. However,…