Security management is the identification of an organization's assets, followed by the development, documentation, and implementation of policies and procedures for protecting these assets.