This report from METASeS is written for those who need to develop policies, programs, strategies, and tactics for dealing with the risks of Internet applications and e-Commerce. The intended audience is management from various levels who are involved in policy, financial, technical, and other decisions for achieving appropriate Internet security. This book is not a detailed technical guide. It is an overview of security prorams, policies, goals, life cycle development issues, infrastructures, and architectures aimed at enabling you to effectively implement security at your organization. In addition to simply writing about general issues and solutions, we have attemted to give concrete examples where possible and to provide "templates" to expedite your own efforts in this exciting, rapidly changing arena.