information security

1. organization of information security

2. asset management

3. human resources security

4. physical and environmental security

5. communications and operations management

6. information security incident management,