INFORMATION SECURITY PLAN AND DATA PROTECTION PLAN: A COMPREHENSIVE GUIDE