After initial conversations with a number of organizations , we narrowed our focus to eight organizations that had implemented fairly comprehensive organizationwide information security programs .
These 8 organizations were forthcoming and open about how they approach their ideas .