Information security management practice

Information security management practice is the practice of protecting an organization by understanding and managing risks to the confidentiality, integrity, and availability of information.

Definitions

According to the ITIL Foundation 4e by Axelos,

Information security management practice. The practice of protecting an organization by understanding and managing risks to the confidentiality, integrity, and availability of information.

Purpose

The purpose of the information security management practice is to protect the information needed by the organization to conduct its business.

Parts

The Practice includes understanding and managing risks to:

• Confidentiality
• Integrity
• Availability
• Authentication
• Non-repudiation