Information security strategy is based on such IT principles as protecting the confidentiality of important information such as customer information, strict compliance with regulations, and maintaining a security baseline that is
above the industry benchmark.