Information security management systems

Documented frameworks of policies, processes and controls through which an organisation manages and continually improves its information security.