Information security policies, procedures, and standards guidelines for effective information security management