Watch this video on YouTube
What should be the primary focus of an information security organization?