An organization is a social group designed to achieve certain goals; organizing is the management function of creating that structure of relationships.

The classic definition: "Organization refers to a social group designed to achieve certain goals. It involves creating a structure of relationships among people working for the desired results."

The two senses of the word:

• Organization (noun) — the institution itself (the company, the agency, the security team)
• Organizing (verb) — one of the core functions of management: determining, grouping, and structuring activities, and allocating authority and responsibility

Why this matters for security: an ISMS never floats in a vacuum — it must be anchored in the organization's structure. Who owns risk? Who can issue security directives? Those are organizing questions, and getting them wrong undermines every technical control.

The formal organization is the official structure on paper (org chart, reporting lines); the informal organization is the actual web of relationships and influence between people.

• Formal organization — deliberately designed: documented hierarchy, defined roles, official communication channels. This is what the org chart shows.
• Informal organization — emerges naturally: friendships, alliances, trusted go-to people, grapevine communication. Invisible on the chart, but often where decisions are really prepared.

Why a security manager must know both: policies travel through formal channels, but acceptance travels through informal ones. A CISO who wins over respected informal opinion leaders gets awareness measures adopted far faster than one who only sends official memos. Conversely, the informal organization is also where shadow IT and policy workarounds spread.

Tip: Classic illustration — a mafia-style chart (Boss → Underboss → Lieutenants) vs. the tangled real network of who actually talks to whom. The second picture is the one social engineers exploit.

Go deeper:

• Informal organization (Wikipedia) — how the emergent web of relationships contrasts with the formal chart.