Information Security: Design, Implementation, Measurement, and Compliance