The project had a three-pronged approach. First, the company formed an unified IT team at the corporate and unit levels, which was led by an information system security officer (ISSO).