The Four CornerstonesCornerstone 1: DocumentationThe CharterInformation Security PolicySecurity Incident Response PlanTakeawaysCornerstone 2: GovernanceCornerstone 3: Security ArchitectureWhat Does Architecture Look Like?How to Put the Security Architecture TogetherWhat’s the Outcome of Developing the Security Architecture?Cornerstone 4: Communications, Education, and AwarenessThe Benefits of Training and Educating OthersConclusion