The Security Management Control defines the Government of Alberta (GoA) security management control objectives, aligns with the Information Security Management Directives, and establishes a risk-based approach to Information Security for all IMT operations.