With the security of information a significant concern of many organisations, information security management continues to be an important research topic. Advanced safeguards are required to protect the information assets of not only large but also small and distributed enterprises. Effective approaches to information security management, such as policies and certifications, are required, and must be supported by a range of technical and human-centric measures.

.