*Faculty-MBA Department Datta Meghe Institute of Management Studies, RTM Nagpur University, Atrey Layout, Nagpur
**Professor, MCA Department VMV-JMT-JJP Science Collge, RTM Nagpur University, Wardhaman Nagar, Nagpur
***Faculty-MBA DepartmentDatta Meghe Institute of Management Studies, RTM Nagpur University, Atrey Layout, Nagpur
Information is one of the most important assets of any institution. Protection of information assets is necessary to establish and maintain trust between the institution and its customers, maintain compliance with the law, and protect the reputation of the institution. Timely and reliable information is necessary to process transactions and support any institution and customer decisions. Any institution’s earnings and capital can be adversely affected if information becomes known to unauthorized parties, is altered, or is not available when it is needed. In this paper we have introduced a information security control model by virtue of which any institution can determine their data security in best possible way, the aspects we have explored are Access, physical & Environment protection, encryption, malicious code prevention, personal and data security and many more.