Security management embodies the administrative and procedural activities designed to secure corporate assets and information companywide. Fundamentally, information security assurance is a business issue that must be addressed in the context of the enterprise business framework.