implements enterprise-wide policies and has developed a security framework that controls user authentication and authorization and includes intrusion-detection software and firewalls at entry points to the network.