Cohen describes the basic structure of information protection and protection programs in enterprises, provides and suggests ways to keep track of what is going on in a real enterprise, and includes questions and endnotes.