Explore the policy and management of information security in a company setting, focusing on methodologies for analysis and user identification