Understanding the whole context Security management involves identifying and protecting an organisation’s assets (systems, people and buildings).