KPMG interview question

How to improve IT security in Company?