Information security management is a set of policies and procedures for systematically managing an organization's sensitive data. The goal of an Information security management is to minimize risk and ensure business continuity by pro-actively limiting the impact of a security breach. It is typically addresses employee behaviour and processes as well as data and technology.