How to be Information security officer