home/glossary/information security program

information security program

nounverified·updated May 18, 2026

A documented approach for organizing and directing all activities undertaken to ensure the confidentiality, integrity, and availability of the information held by the organization.

MWEFFIEC Cybersecurity Assessment Tool, Baseline, May 2017

Senses

ISACA Cybersecurity Glossary

The overall combination of technical, operational and procedural measures and management structures implemented to provide for the confidentiality, integrity and availability of information based on business requirements and risk analysis

NIST SP 800-171r3attested usage pack match

No definition is given in NIST SP 800-171r3. The term is attested in use at 1 citation in that document; a definition is pending curation.

Classifications

Entity Type

Process85%llm-generatedllm:claude-haiku-4-5
?unassignedlast reviewed

Sensitivity

Internal72%llm-generatedllm:claude-haiku-4-5
?unassignedlast reviewed

Information Class

unclassified

Variants

synonym
information systems security program
plural
information security programs
possessive
information security program's
pluralpossessive
information security programs'