Information technology security management consists of processes to enable organizational
structure and technology to protect an organization’s IT operations and assets against internal
and external threats, intentional or otherwise. These processes are developed to ensure
confidentiality, integrity, and availability of IT systems. There are various aspects to the IT
security in an organization that need to be considered. They include security policies and
procedures, security organization structure, IT security processes, and rules and regulations.