Which of the following statements are true about Information Security Management?

It is not designed to recognize, control, or protect information or any equipment that is used in connection with its processing.

It is designed to recognize, control, and protect information and any equipment that is used in connection with its storage and transmission.

Information Security is a system of policies and procedures.

Information Security Management has the objective to manage information security effectively within all service providers.