Information security policy on govt agenda