INFORMATION SAFETY AND SECURITY PLAN AND DATA PROTECTION POLICY: A COMPREHENSIVE OVERVIEW