Evaluate the threats and vulnerabilities that are inherent to information systems and further propose a mechanism for information security in a company that has branches nationally as far as information systems are concerned.