Managing information security in organizations