Assuring the security and privacy of institutional information assets is a complex task for the line manager responsible for international and multi-national transactions. In the face of an unsure and often conflicting international legal framework, the line manager must employ all available tools in an Integrated Security and Privacy Management framework that ranges from legal obligations, to policy, to procedure, to cutting edge technology to counter the rapidly evolving cyber threat to information assets and the physical systems that information systems control.