Building a global information assurance program. (2003)