Abstract
The article presents a new way of managing the security of an organization’s information systems. Presented Reference Model of Security Processes (RMSP) is pointed to the possibility of its use in educational organizations, as a tool for standardization based on the standards ISO 2700x family.
Keywords: IT security, Business process modeling, Process reference model, ISO 27001, Deming Cycle