The purpose of the PAPAI concept is to provide a practical tool and framework for information security management. This promotes the establishment of security in the organization and makes it easier and more efficient to apply expert knowledge from external consultants. By using a well-documented and planned method, you obtain efficient management and a long-term commitment to information security. The contents and structure are adapted to support the certification according to ISO/IEC 17799