What are some of the advantages of incorporating security measures into the design and implementation of information systems? What obstacles might be encountered?