This standard therefore describes, in a step-by-step fashion, how successful information security man-agement may be established and which tasks the management level in government agencies and com-panies will have in this context.