How to start a formal infosec program: If you start thinking along these lines, you will certainly be headed in the right direction.