What is the Objective of Information Security Managemen?

The objective of Information Security Management is to ensure an effective Information SecurityPolicy is in place and enforced through effective, documented security controls that apply not only to in-house employees, but also to suppliers and others who have business/contact with theorganization. It must ensure that any security breaches are managed promptly and effectively, and that risks are identified and documented and lessons are learned accordingly.