An information security programs supports an organization’s technology framework by protecting IT assets, data, and business processes.