3) Information security assurance system: