I. Establish an understanding that an organization must adopt a management maintenance model for its information security systems.
II. State that continuous improvements are essential for the model being the most up to date to protect the information it has within it.
III. Recall the fact that, generally, management models are frameworks that structure the tasks of managing a particular set of activities or business functions.