RE: Senior Management Buy-in (was Top Information Security Management Challenges in the Enterprise Today?)

Another follow up question:  Were senior management intimately involved in 
writing those policies?

We often see IT departments dictating policies that executives are liable 
for. It's interesting that CFOs and CEOs could potentially go to prison 
over this, then delegate the entire task to people with nothing to lose.


- Rich


 



"Cronican, John" <JCronican@sempra.com> 
11/10/2005 12:19 PM

To
<john_blackley@dell.com>, <security-management@securityfocus.com>
cc

Subject
RE: Senior Management Buy-in (was Top Information Security Management 
Challenges in the Enterprise Today?)






Hi all,
My Senior Management are very aware and understand the content of our
information security policies.
John

John G. Cronican, Jr. (BEE, MSSM, CISSP, IAM)
Sr. Infrastructure Technologist
iProtect Sempra Energy
Sempra Energy Corporate Center & Sempra Energy Utilities
10949 Technology Place
San Diego, CA  92127
(858) 613-5738 (Desk)
(619) 787-1906 (Cell)
(619) 978-2493 (Pager)
 
JCronican@sempra.com


-----Original Message-----
From: john_blackley@dell.com [mailto:john_blackley@dell.com] 
Sent: Tuesday, November 08, 2005 10:09 AM
To: security-management@securityfocus.com
Subject: Re: Senior Management Buy-in (was Top Information Security
Management Challenges in the Enterprise Today?)


Further to Brad's excellent post on gathering success stories, I'd like
to ask one favor (because it's an issue in which I have an interest):
When responding, can you give some indication of whether - or not - you
believe your senior management know and understand the content of their
information security policies?