characteristics of standard information security