A university 's central security group had developed a database that served as a valuable management tool in monitoring problems , reassessing risks , and determining how to best use limited resources to address the most significant information security problems .
The university 's central security group was unable to keep track of the current issues .