Focus on adding value to businesses with information security, not just protecting data. Improve organisation's performance and implement appropriate security controls that contribute to building customer trust and loyalty.