ITILV3 - Day 35

Information Security Management (ISM)

Information Security Management is a method used to ensure information availability, confidentiality and integrity.

The information security Manager ensures that the information security policy of the organization meets the Service Level Agreement (SLA) required levels of confidentiality, integrity and availability.

Information Security Management elements:

1. Control
2. Plan
3. Implement
4. Evaluate
5. Maintain

Corporate IT governance determines what needs to be protected as well as the level of protection in Information Security Management.