Training and experience in implementation of policy, standards, and procedures to comply with regulations, and more importantly, ensure the confidentiality, integrity, and availability of sensitive information. Secure network design principles combined with administrative controls and training are the solutions to securing data and networks. Continuous assessment of needs and evaluation of technical controls must also be a part of the solution to maintain the state of security.