Need help with security management please

You have just been hired as the corporate security manager for a major e-commerce corporation. Your boss has told you that the CFO and CEO made legislative compliance a top priority. Because your e-commerce site accepts credit cards, the company handles confidential customer information. You are told that no program or policies currently exist, and your top level management has only recently seen the need for a policy.

Formulate a plan to bring the organization into compliance as quickly as possible. Develop short-term goals over the next 6 months and long-term goals that may take up to 5 years. Consider how you may approach this new assignment and discuss your short and long term approach with respect to building this program.