security management
identification of an organization's assets and potential risks, followed by the development, documentation, and implementation of policies and procedures for protecting these assets
identification of an organization's assets and potential risks, followed by the development, documentation, and implementation of policies and procedures for protecting these assets