Establishing operating procedures and capabilities related to the implementation of information security management, reducing the threat and risk information within the organs, and thus protecting the confidentiality, integrity, availability of information assets.