Threats and countermeasures for information system security: A cross-industry study