Describe the requirement for a sound information security in organizations. How will you describe the requirement of introducing information security procedures, policies or awareness training to enterprises of different sizes, taking into consideration cost involved, th industry, level of threat, and exposure to possible risks (whether external or insider)?