A security program consists of three independent components.