What could you do to protect the web server, communication channels and databases? What company proprietary information needs to be protected? Does the company develop new software, patent medicine, copyrighted materials such as training, documents, etc? Where do you need to use encryption? What should be included in the acceptable use policy for employees, customers, and business partners? What about the email system? What about workstations, customer computers, etc?