Today, information security is becoming more crucial with the rapid advancement of technology. This article highlights the organizational and managerial principles necessary to ensure information security.