Introduction to information security management: definition, fields of interest, basic concepts, development of information security. Requisites for information security: threats to information security, attacks on information systems, business, professional and ethical reasons for defining information security, legal framework. Information security standards: ISO 27000. Organization of information security: internal organization, external organization, resource management, physical and logical security, security incidents, business continuity. Information security management system: the concept of information security management systems and information security management, the scope of the system, user identification and resources, system design, policies, standards, procedures. Security risk management: fundamentals of risk management, risk identification, risk assessment, risk reduction, risk avoidance, strategies for risk control. Information security implementation: technical and non-technical aspects of implementation, defining security requirements, implementation of information security management, information security analysis, monitoring and maintenance.