The most important aspects of information security in a overview:

• It is always a need for continuous improvement
• Information Security is always very complex and is not reduced to the IT
• The need to controllability
• The need to measurability
• the need to monitoring / verification
• The Technology
• Think of resource limitation
• It is always a lifelong learning
• Integration of your employees with education / training
• Increase the consciousness (Awareness)
• Integrate your employees in the security policies
• Find regulations
• Built up an IS organization