Refining Information Security Management Approaches: We developed and implemented information security requirements for different systems, and enhanced control at the business level with technical approaches to prevent both internal and external security breaches that caused either by own errors or by external security attacks.