Information security manager as a strategist