Security Management
What is Security Management?
The systematic planning, organizing, and controlling of activities to maintain the security of an organization's information assets.
Terms that appear alongside security management
Each of these is named in at least one of the same controls as security management. The number is how many controls name both.
- management system 37 shared controls
- information security 34 shared controls
- information security management system 25 shared controls
- nist 12 shared controls
- audit 12 shared controls
- iec 27001 11 shared controls
- policy 10 shared controls
- governance 10 shared controls
Frameworks that govern security management
What the standards actually require on security management
Requirements naming security management across 6 standards, quoted from the control text.
Establish and maintain an ISMS proportionate to organizational size and complexity
IS.I.OR.200 · Information Security Management System →Network controls, security in network services and segregation in networks apply as the base guidance requires, read as protecting the personal data that crosses those networks.
iso-27701-2019::6.10.1 · Network security management →Deep synthesis service providers must establish and improve management systems for user registration, algorithm-mechanism review, science-and-technology ethics review, information release review, data security, personal information protection, anti-telecom-fra...
CN-DS-A7 · Deep Synthesis Security Management System →Operate an information security management system aligned to ISO/IEC 27001 covering the organisational units, sites and processes that deliver the cloud service, and retain documented scope, statement of applicability and the latest management review results.
C5-OIS-01 · Information Security Management System (ISMS) →Data processors must establish a sound data-security management system across the whole process, organise data-security education and training, and adopt appropriate technical and other measures;
DSL-Art27 · Data Security Management System and Whole-Lifecycle Measures (Art. 27) →Product supplier defines and maintains a documented Security Development Lifecycle covering organisation, responsibilities, training, security expertise, third-party component management and security plan for each product.
62443-4-1-SM · Security Management (Product Development) →Questions people ask about security management
What is Security Management?
Why is Security Management important for compliance?
Which compliance frameworks address Security Management?
Where can I learn more about Security Management?
See how Security Management applies across compliance frameworks
Our platform maps 686 frameworks with 311K cross-framework control mappings. Explore how this concept is addressed across standards.