text: To supplement our ongoing audit work at federal agencies and gain a broader understanding of how information security programs can be successfully implemented , we studied the management practices of eight nonfederal
  
  ###
  
  We felt that the implementation of information security programs in a federal context deserved more research .