The University of SydneyPage 21Orion Strategy Process–Activity 3–Identifying the ideal security situation–Develop hypothesis concerning the nature and scope of improvements–Stakeholders participate to identify both ‘feasible’ and ‘desirable’ options–It is rooted in the ideal world–Activity 4–Model ideal information systems security–A conceptual modeling step–Define performance measures–Define monitoring activities as per the defined metrics–Define control actions