The Ponemon Institute released a report (November 2009) commissioned by Lumension on the State of Endpoint Security. Metrics from both these reports demonstrate a continued lack of strategic focus for information security efforts that should be alarming. Some key metrics (some of the 19 criteria) from the GAO report are as follows:Some key metrics. The results were less than sterling and represent a trend that is mirrored in private industry. A core components of any IT plan (not security) is asset management with configuration management being the twin sister.”]