Centralization of security is of increasing urgency as the threat environment continues to expand and as regulatory requirements take hold. A centralized security system is considerably easier to audit than a system where management is spread throughout the enterprise. It is also likely to improve oversight and analysis and to create a more robust environment. Roles and responsibilities are clarified, and maintaining security in interactions with outside organizations such as suppliers and outsourcing vendors is easier.