Should information security be a higher government priority?