The best defense is a good offense. Take an active approach to information security by assessing security program maturity.