The term “information security” may have different connotations, depending on the person who is asked about it. For an average computer user, information security would probably refer to his PC’s antivirus software; a networking professional would take this term to be directed at the proper configuration of the network’s firewalls and routers; and for senior management, the phrase could mean ensuring that the organization is not vulnerable to a data breach. With the amount of subjectivity is attached to this term, the task of implementing information security is an organization…