Despite These differences, two key characteristics were common to each of the  (1) information security responsibilities had been clearly defined for the groups involved and (2) dedicated staff resources had been provided to carry out These responsibilities.
The staff responsible for carrying out information security tasks signed a two year contract for the job.