Technical aspects of information security (IS) management are considered, including management of logical access of users to the organization's assets, management of secure data transfer and operational activities, development and maintenance of information systems taking into account the requirements for their IS, management of configurations, changes and updates in the organization's assets. The basics of physical protection and environmental protection are briefly outlined. Organizational and personnel issues of information security management are analyzed. Four main models of information security organizational management have been introduced, which are combinations of centralized and de-centralized management and information security administration. Organizational infrastructure of information security management is considered. Organizational measures for information security management are listed. The activity, functions, composition and options for creating the organization's information security service, as well as the tasks, functions, duties, rights and responsibilities of the information security administrator of the organization's subdivision are described in detail. Groups of competencies, positions and areas of activity of information security specialists are analyzed in detail. Particular attention is paid to taking into account information security issues when hiring personnel and in the formation of official duties of personnel.