Realizing the simultaneous goals of preventing unauthorized access and maintaining service availability requires multiple point systems that address individual security issues. A comprehensive security management framework requires seven critical security areas -- these are discussed in this paper.