The basics and threats of information security, security policies, standards, and technologies, managing and evaluating security, legal aspects