To develop guidelines and procedures for enhancing the information security of the Paridso police department there needs to be an IT system. This system should include: a risk assessment, controls, measures, formal policies, and an evaluation. The cycle is intended to have the organization fully understand what are the risks, the consequences, and the importance of information security. In addition to the cycle, it is important for trainings to be implemented to all employees of the department. The police department should take these recommendations seriously in order to control and prepare for future information security issues. The aforementioned IT system that the department should adopt is important because there needs to be measures taken