An information security program aims to support a company achieving its business goals. The fields of action where the information security program can mainly contribute are the protection the confidentiality …