ABSTRACT

While organizations have been establishing security postures within their environment since the 1970s, the term “security management” is not a well-known term that is used in the same manner across various organizations. Security professionals may even refer to security management from a variety of different aspects or views. Is security management used to define how the organization establishes and defines its security posture? Is it used to perform the day-to-day security operations that occur? What is security management, and why are organizations moving toward the establishment of this standard today? These questions are answered in this chapter, along with information on how to establish security operations to ensure that the requirements defined within security management are met.