Fill in the blank with an appropriate word. _________ are used in information security to formalize
security policies.

Answer: Models.

Explanation:
Models provide a great help in information security to formalize security policies. These
models can be abstract or intuitive. They provide a framework for the understanding of
fundamental information security architectural concepts.
CISM Review Manual 2010, Contents. “Information Security Program Development”