INFORMATION SAFETY AND SECURITY POLICY AND DATA PROTECTION POLICY: A COMPREHENSIVE GUIDELINE