Security program management and the related implementation of controls over access to data, systems, and software programs, as well as service continuity planning, are central factors affecting an organization's ability to protect its information resources and the program operations that these resources support.