RELEVANT INFORMATION SECURITY POLICY AND DATA PROTECTION PLAN: A COMPREHENSIVE OVERVIEW