Identify the missing word in the following sentence. The purpose of the 'information security management' practice is to [?] the organization's…

The purpose of the 'information security management' practice is to protect the information needed by the organization to conduct its business. This practice ensures the confidentiality, integrity, and availability of information, collectively known as the CIA triad. Protection involves managing risks related to unauthorized access, use, disclosure, modification, or destruction of information. The practice establishes and maintains policies, processes, and controls to safeguard the organization's information assets.

B. store: Storing information is a function of data management or infrastructure management; information security's purpose is to protect that information wherever it is stored or used.

C. audit: Auditing is an activity used to verify that security policies and controls are effective and being followed, but it is not the primary purpose of the practice itself.

D. provide: Providing information relates to the 'availability' aspect of security, but 'protect' is a more comprehensive term that also includes confidentiality and integrity.

1. AXELOS. (2019). ITIL® Foundation: ITIL 4 Edition. TSO (The Stationery Office).

Section 5.2.8

"Information security management": "The purpose of the information security management practice is to protect the information needed by the organization to conduct its business." This section further explains that this includes understanding and managing risks to confidentiality

integrity

and availability.