A custodian shall deny inspection of the part of a public record that contains information about the security of an information system.