recognize both excellence and incompetence in the field of information security