What is the purpose of the 'information security management1 practice?

To ensure that accurate and reliable information about the configuration of services is available when and where it is needed

To observe services and service components

To protect the information needed by the organization to conduct its business

To plan and manage the full lifecycle of all IT assets