SMS: Managing information security