Conducting appropriate security review exercises and making use of the findings to drive programmes forward Comparing and contrasting SANS & ISO 27001 as part of the infosec toolbox Utilising information security frameworks as part of a holistic approach to reducing risk