A simple and easy-to-follow framework that will change the way you look at information security for ever