Information Security and Privacy Best Practices