The actual work on information security is then divided into five different areas: overall information security; work related to HR; work related to premises and physical security; work related to IS/IT; and work associated with the various management functions.