Identification of Information Security rules and procedures.