This textbook provides foundational knowledge on the topic of information security and information security management. In addition to explaining current and relevant basic concepts, it offers definitions and outlines methodological and legal frameworks. The optimal practical implementation of information security management is presented with consideration of two common standards for information security: the Basic Protection Manual and ISO 27001. This gives the author concrete answers to questions regarding risk assessment and threat analysis, security and data protection controls, as well as incident management and security auditing and monitoring. Furthermore, aspects of cyber and computer crime, IT forensics, and security intelligence are also addressed. Thus, the book is of interest to anyone focusing on the prevention of security incidents.