The purpose of the study is to discuss fundamental information security control measures that can be used to develop a model to determine organization information security preparedness level. The model utilizes a ...