You have been hired as an information security analyst consultant by an organization that you are familiar with. What areas of the organization would you look at to determine what needs to be done to better protect the organization's IT assets. Based on your research and readings,

• What areas would you look at first?
• Once you have identified some areas for improvement, how would you put together a recommended plan of action?