SANS conducted this survey to explore how organizations are handling prevention. Breaking down possible preventive measures into four major categories or domains (business, architectural design and development, operational, and technology), the survey sought to answer three major questions:
1. What measures have respondents implemented that they believe will prevent breaches?
2. What measures not necessarily implemented do respondents consider preventive?
3. What barriers have stopped respondents from doing what they should be doing?