INFORMATION SAFETY AND SECURITY PLAN AND INFORMATION SAFETY AND SECURITY POLICY: A COMPREHENSIVE GUIDELINE