Due to information security’s (IS) importance in protecting organizations’ data, international standards, norms, and best practices have been proposed for managing IS. Organizations establish the information security ...