How Much Information Security?