A Model of an Information Security Management System Based on NTC-ISO/IEC 27001 Standard