Argues that the security of automated information systems must be made a management priority and effectively supported. The steps needed to achieve this objective are outlined in the areas of information resources management planning, budgeting and costing, directing, organizing, training, and controlling. A list of suggested readings is provided. (six references) (CLB)