Information security management (ISM) is the process of protecting an organization’s data and assets from potential threats.