Despite These differences , two key characteristics were common to each of the ( 1 ) information security responsibilities had been clearly defined for the groups involved and ( 2 ) dedicated staff resources had been provided to carry out These responsibilities .
The staff responsible for carrying out information security tasks signed a two year contract for the job .