IT Governance approves second group of information security