Keep this in mind as you move toward familiarity with this position.ДЄnother role of the information security manager is what I like to call вЂњAnalyst-in-Chief,вЂќ meaning that the buck stops with them when it comes to analytically assessing an information security situation and then reacting appropriately. Some have it and are cut out for the position, while a majority of people do not. With that said, managerial positions such as this require a certain intangible skill set: managerial people skills. The primary role of the information security manager is to manage the IT and information security departmentвЂ™s team and personnel. Managing an information security team, let alone an entire department, takes an acute big-picture-oriented mind that has the brainpower required to make the higher-level decisions while having the foresight to assemble a strong team of information security experts that can be trusted to handle the lower-level, hands on tasks and changes that their information security landscape calls for. Simply put, information security managers wear many hats when they take on this position. You may think that information security managers have only one role, but the signpost of this section is pluralized for a reason. This measure ensures damage is repaired as far as possible.The roles of the information security manager This measure is used to counteract any repetition of security incident. It is important to detect any security incident as soon as possible. It deals with minimizing any possible damage that may occur. Measures such as control of access rights, authorization, identification, and authentication and access control are required for this preventive security measures to be effective. This key element ensures prevention from security incidents to occur. Improve the implementation of security measures and controls Improve on security agreements as specified in, for example, SLAs and OLAs The objective of Maintain element is to в€’ Supervise and check compliance with security policy and security requirements in SLAs and OLAs The objective of Evaluation element is to в€’Д¬arry out regular audits of the technical security of IT systems This key element ensures that appropriate procedures, tools and controls are in place to underpin the security policy. The purpose of this element is to devise and recommend the appropriate security measures, based on an understanding of the requirements of the organization. ISM framework involves the following key elements в€’ ControlД®stablish an organization structure to prepare, approve and implement the information security policy The following diagram shows the entire process of Information Security Management (ISM) в€’ Key elements in ISM Framework It is required for ISM security policies cover all areas of security, be appropriate, meet the needs of business and should include the policies shown in the following diagram в€’ ISM Framework ISM Process

Information is available and usable when required, and the systems providing the information resist attack and recover from or prevent failures (availability)Д«usiness transaction as well information exchanges between enterprises, or with partners, can be trusted (authenticity and non-repudiation) Information is complete, accurate and protected against unauthorized access (integrity)

Information is observed or disclosed on only authorized persons Information security is considered to be met when в€’ Information Security Manager is the process owner of this process. It also ensures reasonable use of organizationвЂ™s information resources and appropriate management of information security risks.

Information Security Management (ISM) ensures confidentiality, authenticity, non-repudiation, integrity, and availability of organization data and IT services. Service Assets and Configuration Management.

Information security oversight process