There was a new CIO in town, and she was quite concerned about information security.

One of the guys on my team was interested in security, so he started taking classes and attending conferences all over the country. We also set up a cross-functional security team. Stakeholders from Legal, HR, Corporate Security, and others met regularly to develop policy and identify the critical issues.

After this was underway, we set up a network security infrastructure and completely changed our dial-up methodology. Unfortunately, I can't describe the details here.

The security lead did a great job and was promoted to Information Security Manager.

Some Firewalls.