Ensuring the security of information, being the most important business asset, is not an easy task to do.All pieces need to be assembled whilst taking into account technical, economical and legal aspects.Because of its complexity information security requires a long experience and deep knowledge in the area.