Skip to main content

Information Security Management

Information Security Management is the Governance capability which encompasses establishment, implementation and oversight of an organization's infrastructure security. This includes processes for protecting data integrity, availability and confidentiality, managing information risks, and ensuring compliance with regulatory and policy requirements.

Level 1: Emerging

At an emerging level, you are beginning to understand the principles of Information Security Management within a governance context, showing awareness of potential risks and basic mitigation strategies.

Level 2: Proficient

At a proficient level you are adept at implementing and maintaining information security policies and procedures, ensuring compliance with governance standards and effectively managing risks related to data protection.

Level 3: Advanced

At an advanced level, you are able to effectively design and implement information security management practices that align with the organization's governance framework, ensuring compliance, risk mitigation, and strategic alignment.

Where is this capability used?