Security Management System (SeMS): A guidance note for Accountable Managers

SeMS provides a formalised, risk-driven framework for integrating security into the daily operations and culture of an Entity. The SeMS enables an Entity to identify and address security risks, threats, gaps and weaknesses in a consistent and proactive way. SeMS is not a mandated process but the Accountable Manager Guidance explains what is entailed if an Entity intends to develop a SeMS that can be used by the CAA.