Information Security Management is a broad category, yet it is a very important area to a practicing accounting firm. The term Information Security relates to activities surrounding the protection of information and information infrastructure assets against the risks of loss, misuse, damage, disclosure,or theft. Information Security Management is the term to describe the collections of controls which an organization uses to ensure it is managing these risks.