Jonathan Trull took over as Chief Information Security Office for the state of Colorado in 2012. He says he became concerned with what he observed as repeated mistakes and violations that were not addressed. Trull even took part in a penetration test on state systems with results he says were “horrifying” Trull: “I’ve got a very limited budget. I’ve got about ten staff across 17 departments, our operational budget for this year was $6,000. We feel strongly that with the first five critical controls we will be able to implement the first 5 critical controls within a three-year period of time””]