
have passed. Second, the Director of IT Security and Enterprise Archi-
tecture and the Director of Corporate Security occupy positions of
authority who report directly to top management. From this level, they
are able to institute necessary changes. Third, IT and physical security are
not treated as disparate entities, but as interconnected components of the
organization’s security infrastructure.
The integrated security management system has allowed Advo to
achieve a greater level of security with fewer employees. By the end of
2004, thirty employees remained in physical security, down from 109.
Also, a flatter organizational structure has been cr