The status quo of virus scans and dirty word searches no longer make an effective information protection program. Policies, procedures and solutions must integrate and evolve as moving parts of the same system; requiring a better grasp of people and technical solutions. This session shares lessons learned from developing information protection programs across the U.S. Gov and the private sector.