After initial conversations with a number of organizations , we narrowed our focus to eight organizations that had implemented fairly comprehensive organizationwide information security programs .
There were a total of 8 organizations that we decided to put most of our focus on .