• Our approach comprises a holistic information security management strategy that includes comprehensive security policies and standards, a robust security awareness and education program, and the implementation of advanced and layered defenses.