Security program management and the related implementation of controls over access to data , systems , and software programs , as well as service continuity planning , are central factors affecting an organization 's ability to protect its information resources and the program operations that these resources support .
The resources are a drain on program operations .