Definition of security practices in security management part of security level management model

To manage security level of IS, the first, organizations must be able to decide security level, the second, organizations must have procedures for building security countermeasures according to security level. For next step, organizations must be able to select areas where security countermeasures should be applied, and the last, organizations must be able to evaluate and improve the effect of security countermeasures. In this paper, we propose some essential elements for security level management of IS. These essential elements are expressed like as security practices, and in this paper, we propose some security practices related to security management area.