How to implement an effective security strategy?
Why isn't the existing security strategy effective enough? Are there any loopholes in the system and, if so, how to deal with them? What should you pay attention to in the first place, and what should be your long-term strategy?