Question: what are the three key elements that comprise an effective security program?
Answer:  Risk management;  Policies and procedures; and.  Education.