Security Management
What is Security Management?
The systematic planning, organizing, and controlling of activities to maintain the security of an organization's information assets.
Terms that appear alongside security management
Each of these is named in at least one of the same controls as security management. The number is how many controls name both.
- management system 37 shared controls
- information security 34 shared controls
- information security management system 25 shared controls
- nist 12 shared controls
- audit 12 shared controls
- iec 27001 11 shared controls
- policy 10 shared controls
- governance 10 shared controls
Frameworks that govern security management
What the standards actually require on security management
Requirements naming security management across 6 standards, quoted from the control text.
The institution has a comprehensive information security program covering all technology and information assets and complying with the Information Security Standards, with administrative, technical and physical safeguards based on its inherent risk profile and...
ffiec-it-examination-handbook::MGT-I.B.2 · I.B.2 Information Security (Management) →In line with this document's requirements, the organization must set up, put into operation, keep up and keep improving a security management system, covering the processes it needs and how they interact.
iso-28000-2022::4.4 · Security management system →Identical in substance to IS.I.OR.235: contracted ISMS activities comply with the Regulation and work under the organisation's oversight, their risks are managed, and the competent authority can access the contractor on request.
easa-part-is-information-security-in-aviation::IS.D.OR.235 · IS.D.OR.235 Contracting of information security management activities →The security management plan is reviewed (Figure 2 step 13) and updated when circumstances change.
iso-19650-organisation-and-digitisation-of-information-about-buildings-and-civil-engineering-works-bim::5:7.6 · 7.6 Review of the security management plan →The CSP runs an ISMS for the cloud service. Level 1 (items a to k): (a) an ISMS scoped to the cloud environment and its assets; (b) risk assessment and treatment policies; (c) an approved security policy; (d) assigned security roles;
mtcs-singapore::6.2 · Information security management system (ISMS) →The organization sets up, puts in place, keeps up and continually improves an ISMS that meets the requirements of this standard. (The 2022 edition adds that this includes the processes needed and how they interact.)
iso-27001-2013::clause-4.4 · Information security management system →Questions people ask about security management
What is Security Management?
Why is Security Management important for compliance?
Which compliance frameworks address Security Management?
Where can I learn more about Security Management?
See how Security Management applies across compliance frameworks
Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.