A Review on Information Security Program Development and Management

For any business or organization to endure and compete with other businesses, they need to invest in what is called “Information Technology”, which guarantees data availability, integrity, and confidentiality. However, with the increase of internal and peripheral threats, the IT system of a business could be exposed to potential risks. This is the main reasons for choosing the importance of providing security and risk management for sustainable businesses organization. In this paper it will provide some security measure and risk management procedures in order to prevent the organization from the many attacks, it is essential for the information security manager to have a broad knowledge about the current and upcoming technology, system and risk are available in the local domain.