Information security management is basically based on 3 main elements. These are the technology process and human trio. The concept we call technology consists of information technology applications and hardware. In other words, we have firewall, servers, antivirus systems, log systems, mail gateway and applications. When it comes to security, technology often comes to mind, but technology alone is not enough. You get a firewall, but if you do not determine your processes or policies correctly in this firewall and do not employ competent personnel for this firewall, you cannot fully provide security.