‘Security of an information system’ includes, without limitation, the security of:

1.  The physical infrastructure of an information system; and

2.  Information, including, without limitation, personal information, that is stored on, transmitted to, from or through, or generated by an information system.