An Information Security Management System (ISMS) provides a systematic approach to managing sensitive information so that it remains secure. It combines policies, procedures, processes, people, and technology to safeguard organisational data from unauthorized access, disclosure, alteration, or destruction as well as disruption. An ISMS addresses people, processes, and technology as integrated aspects of safeguarding information.