The University of SydneyPage 2Outline–Strategic security decisions–Security strategy planning process–Designing for IS security–Control structures–System Security Engineering Capability Maturity Model–Question time !