INFORMATION PROTECTION PLAN AND DATA PROTECTION POLICY: A COMPREHENSIVE GUIDE