These organizations establish a central management focal point, promote awareness, link policies to business risks, and develop practical risk assessment procedures that link security to business needs.
The organizations work very hard to increase security options for businesses. 