An information security program encompasses all the activities and resources that collectively provide information security services to an organization. A successful security program has the right technical information security capabilities as understanding of the business context, drivers and stakeholders.