Chapter 1, Problem 1RQ

Explanation of Solution

List of communities of interest that engage in an organization’s effort:

• InfoSec Community (InfoSec managers and professionals):
• This community protects the organizations information assets from the many threats they face.
• InfoSec Community includes a risk manager or the CISO (Chief Information Security Officer).
• Example:
• This community comprises of the IT professionals, CISO and managers who bear the responsibility is to secure the information.
• Information technology community (InfoSec technology managers and professionals):
• This community supports the business objectives of the organization by supplying and supporting IT that is appropriate to the organizations need.
• Information technology community includes a systems administrator or the CIO (chief information officer).
• Example:
• This community consists of IT professionals, CIO and managers who act as providers of information technologies and also supply other resources.
• General business community (nontechnical managers and professionals):
• This community articulates and communicates organizational policy and objectives and allocates resources to the other group.
• General business community includes the CEO or the Director of Human Resources.
• Example:
• This community includes non-IT professional, users and managers.