Importance of information security policies