Information security management practice

The practice of protecting an organization by understanding and managing risks to the confidentiality, integrity, and availability of information