And so, as a result of having some financial crises in different parts of the world, various countries have seem fit to implement regulatory change that addresses assessing the security of information in information systems. 