Information security is part of information risk management. The main focus of any information security program is to protect the confidentiality, integrity as well as availability of information, thus maintaining organizational productivity which is often an important consideration. Thus information security industry has been able to offer guidance, information security policies, along with industry standards on passwords, antivirus software, firewalls, legal liability, encryption software, and security awareness, for the purpose of sharing the best practices.