INFO PROTECTION PLAN AND INFORMATION SAFETY POLICY: A COMPREHENSIVE GUIDELINE