no such thing as complete information assurance