Definition
Information Security Management is the planning, implementation, maintenance and continual improvement of activities protecting information and supporting Assets.
Human Explanation
It covers not only technology but also people, processes, responsibilities and decisions.
Why it Matters
Security needs continuous management because threats, technology and organisations keep changing.
Conceptual Boundary
It is not a single project or implementation but an ongoing organisational process.
Practical Perspective
The greatest weakness is often not missing technology but inconsistent management.