In the era of the Internet of Things and widespread access to information technology, businesses must ensure that information is secure, incorporating this into their governance objectives by establishing relevant policies; notification, management, and prevention mechanisms; and improved information security management.