a general overview of information security and its core concepts