INFORMATION SECURITY PLAN AND DATA SECURITY PLAN: A COMPREHENSIVE GUIDELINE