Our approach comprises a holistic information security management strategy that includes comprehensive security policies and standards, a robust security awareness and education program, and the implementation of highly advanced and layered defenses.