Information Security Management (ISM) covers all measures to protect information (digital and non-digital proprietary and personal information) and to make sure that IT systems are handled in accordance with the defined requirements for − confidentiality, which means preserving the restrictions on authorised access to information and IT systems and preventing unauthorised disclosure of information and unauthorised use of IT systems, − integrity, which means ensuring accuracy, completeness, authenticity and non-repudiation (origin and content cannot be denied) of information and accompanying metadata and − availability, which means ensuring timely and reliable access to and use of information and IT systems as required for business purposes.