Content reminder from the moderator:
There are several very good threads coming across on this list, but on
many occasions I receive technology-oriented questions, or our
discussions become heavily influenced by technology-oriented responses
to management-oriented questions.
This list is really geared more toward the security people/process
management aspects than the technology issues - there are several other
forums for the technology discussions to take place on. Please use other
security-focus mailing lists to address your technical needs -
technology-oriented posts to this forum will not be processed.
Considering that many people have differing opinions regarding what is
and what is not a 'security management' issue and/or where to draw the
line between people, process and technology discussions, please follow
the directions provided at the end of this message to unsubscribe if the
content guidelines below do not meet with your expectations.
The moderator does NOT have the ability to remove people from this list
- you must follow the instructions provided below in order to
unsubscribe.
0.1.1 What is Security-Management?
SECURITY-MANAGEMENT is a forum established for the discussion of
information security program management as a critical business support
process. We as a profession generally tend to define the components of
that process under the headings of physical, administrative, and
technical security controls leveraged to mitigate risks that are
prevalent in the information age. But information security does not
exist in a vacuum. Information security is a strategic concern that must
be aligned to support an organization's key mission and/or business
objectives. This list specifically addresses the business component of
risk management and the myriad of information security program
management issues that must be dealt with by information security
management personnel and others with similar responsibilities and/or
interests. The SECURITY-MANAGEMENT mailing list is meant to assist
those with security program management responsibilities, focusing on
topics related to the planning, implementation, and maintenance of a
strategic information security program aligned to support individual
organizational needs.
0.1.2 What is appropriate content?
- - Information security program objectives
- - Risk management
- - Roles and responsibilities
- - Budget planning
- - Business impacts
- - Other information security program management issues
0.1.3 What is inappropriate content?
- - Announcements of security vulnerabilities
- - Product advertisements
- - Discussion of technical security issues
- - Non-security related materials
0.3.2 How do I unsubscribe?
Send an e-mail message to
security-management-unsubscribe@securityfocus.com from the subscribed
address. The contents of the subject or message body do not matter.
You will receive a confirmation request message to which you will have
to answer. If your email address has changed email
listadmin@securityfocus.com and ask to be manually removed.
Thank you for your time and attention,
Moderator
