This publication is primarily the responsibility of the business, with the IT Security Officer responsible for setting Security Policy. This book looks at Security from the service provider stand-point. It identifies how Security Management relates to the IT Security Officer and provides the level of security necessary for the provision of the total service to the organisation.