▁that ▁protect ▁information ▁assets ▁and ▁give ▁confidence ▁to ▁interested ▁parties ." ▁ ▁A ▁basic ▁concept ▁of ▁security ▁management ▁is ▁information ▁security . ▁The ▁primary ▁goal ▁of ▁information ▁security ▁is ▁to ▁control ▁access ▁to ▁information . ▁The ▁value ▁of ▁the ▁information ▁is ▁what ▁must ▁be ▁protected . ▁These ▁values ▁include ▁confident ial ity , ▁integrity ▁and ▁avail ability . ▁In ferred ▁aspects ▁are ▁priv acy , ▁an onym ity ▁and ▁ver ifi ability . ▁ ▁The ▁goal ▁of ▁security ▁management ▁comes ▁in ▁two ▁parts : ▁▁ ▁Security ▁requirements ▁defined ▁in ▁service ▁level ▁agre ements ▁( S LA ) ▁and ▁other ▁external ▁requirements ▁that ▁are ▁specified ▁in ▁under pin ning ▁contract s , ▁legisl ation ▁and ▁possible ▁internal ▁or ▁external ▁im posed ▁policies . ▁ ▁Basic ▁security ▁that ▁guarante es ▁management ▁continu ity . ▁This ▁is ▁necessary ▁to ▁achieve ▁simplified ▁service - level ▁management ▁for ▁information ▁security . ▁ ▁SL As ▁define ▁security ▁requirements , ▁along ▁with ▁legisl ation ▁( if ▁applicable ) ▁and ▁other ▁contract s . ▁These ▁requirements ▁can ▁act ▁as ▁key ▁performance ▁indic ators ▁( K PI s ) ▁that ▁can ▁be ▁used ▁for ▁process ▁management ▁and ▁for ▁interpre ting ▁the ▁results ▁of ▁the ▁security ▁management ▁process . ▁ ▁The ▁security ▁management ▁process ▁rel ates ▁to ▁other ▁IT IL - process es . ▁However , ▁in ▁this ▁particular ▁section ▁the ▁most ▁obvious ▁relations ▁are ▁the ▁relations ▁to ▁the ▁service ▁level ▁management , ▁incident ▁management ▁and ▁change ▁management ▁processes . ▁ ▁Security ▁management ▁▁ ▁Security ▁management ▁is ▁a ▁continuous ▁process ▁that ▁can ▁be