Is information security an application of social science?

Because social science deals with how people behave and "social engineering" is one of the techniques to defeat information security, it would seem that at least some aspects of information security are related to social science. Other areas where information security and social science would overlap would include: speparation of duties, roles and responsibilities, acceptable ue policies, and policy enforcement.