Nowadays, Information Security is one of the most challenging issues in organizations. With the development of technology and the Internet, people insist on greater access to information and data. In addition to creating value-added for the organization, collecting a huge amount of data in the organization's database and using IT tools threat it by losing the funds and credibility obtained from customer confidence in different ways. Therefore, managing information security is necessary due to the current competitive environment. In spite of the advancement of technology, the existence of many complexities in this subject led to the growth of security incidents. Hence, the organizations’...