Describir: Information security practice and experience :