The efficiency of a company's information technology depends directly on the individuals that implement, configure, troubleshoot and operate the technology infrastructure on a day-to-day basis. The company's policies and procedures are the foundation of efficient technology operations: for a company to have an effective information technology infrastructure, it must have technology, people and processes. Many companies focus only on acquiring technology such as firewalls, anti-virus software, intrusion detection systems, etc., yet fail to implement products that ensure that their employees are fully aware of the company's policies and procedures regarding the operation of the technology. A study by IDC indicates that 68% of technology breaches occur from within the organization.