Recommendations for the Prevention of Information Security