The University of SydneyPage 17Formal IS Security–Creating organisationalstructures and processes to ensure information security, i.e. ensure confidentiality, integrity, and availability.–Organizations are entities that process information with division of labourand add value in the process.