. . . "Reflecting these compromises, this Department defines information security standards, procedures, policies, and other requirements applicable to the entire organization." .