Data security management consists of the planning, development, and execution of security policies and procedures to provide proper authentication, authorization, access, and auditing of data and information assets. Effective data security policies and procedures ensure that the right people can use and update data in the right way and that all inappropriate access and update is restricted. Understanding and complying with the privacy and confidentiality interests and needs of all stakeholders is in the best interest of any organization.

This work program template highlights general steps an organization should follow with respect to effective data security management.