Kerangka keamanan informasi ada 11 area:
- Security Policy
- Organisation of Information Security
- Asset Management
- Human Resources Security
- Physical and Environmental Security
- Communication and Operation Management
- Access Control
- Information System Acquisition, Development and Maintenance
- Information Security Incident Management
- Business Continuity Management
- Compliance
