Add a shallower on-ramp to information security

The existing information security documentation launched somewhat abruptly
into the sea of jargon and acronyms that is information assurance in government.
I've tried to provide a slightly more user-friendly lead-up, explaining first
what information security is and how it's practised, before getting to the
government-specific bits.