Although the management practices described in this guide are fundamental to improving an organization's information security posture, they should be considered in the context of this broader spectrum of issues.
Only the management practices listed are fundamental in improving an organization.