Information security firm SecureState's President and CEO gives businesses advice on the best approach to information protection in 2010. He lists the five first steps, including identifying sensitive data, producing a data flow chart and assessing systems.