Executive Summary, Benchmarking Readiness, Protecting Identity, Protecting Devices, Protecting Networks