Focus on information security policies, risk management, and compliance standards.