Provides recommendations for information security management for use by those who are responsible for initiating, implementing or maintaining security in their organization.