Shipping costs for Information Security Policies, Procedures, and Standards: Guidelines for Effective Information Security Management