Chapter e27 - Information Technology Security Management

Abstract

Information technology (IT) security management can be defined as a process that enables organizational structure and technology to protect an organization's IT operations and assets against internal and external threats, intentional or otherwise. The principal purpose of IT security management is to ensure confidentiality, integrity, and availability of IT systems. Fundamentally, security management is a part of the risk management process and business continuity strategy in an organization.