With ISO 22301, it is the preparation of any business or society against external problems and revealing its own defense mechanism. Within the scope of these options, which exist under the name of social security, it manifests itself in relation to attacks on the personal information of companies or societies directly.