Computer software for use in the development and implementation of a comprehensive information security plan