What have been the main successes in terms of security policy in your chosen area?

1. What does security mean in the context you have chosen?
2. What are the main challenges/issues (with data) for security in your chosen area?
3. What are the main approaches to security in your chosen area?
4. Who sets security policy in your chosen area and what are the steps in that process?
5. What have been the main successes in terms of security policy in your chosen area?
6. What have been the main failures in terms of security policy in your chosen area?