management, methods for managing IT investments, initiatives to be taken regarding information security and IT, policies related to the training of IT personnel, and policies related to reforming mind-sets to raise the awareness of IT among employees, as well as other matters.