Each Information Security policy includes specific responsibilities of the ISA and ISM in regards to that policy. Information Security Managers typically are in a technical leadership positions.