How do you approach information security, considering that the organization is a target for hackers?