Is information security a technical problem, a business problem that the entire organization must frame and solve, or both? Explain the nature of the problem in the context$($s$)$ you chose.