It defines and describes the concepts associated with, and provides management guidance on, network security.