Re: Information Security

> >
Id like to assemble a toolkit both for gaining security control and
then maintaining it. Also pointers as to best practices and the like
would be most appreciated.
<<

Based on the limited information, you likely have a bigger problem than you can 
solve alone.  The first step necessary for an efffective security program isn't 
tools, it is agreement by management that security is necessary, which it seems 
you may not have.  Once management agrees, the next step is a policy to help 
everyone understand what their responsibilities are.  This should be clear and 
unambiguous.  

Only then should you think about what tools are necessary, since these tools 
will be technical means to enforce the policy.  

Do you even have the basics covered... properly managed firewalls, managed AV, 
etc?