Benefits, risks and recommendations for information security