Question: what are the three key elements that comprise an effective security program?
Answer:  Risk management;
 Policies and procedures; and.
 Education.