“Security of an information system” includes, without limitation, the security of:
1. The physical infrastructure of an information system; and
2. Information, including, without limitation, personal information, that is stored on, transmitted to, from or through or generated by an information system.