Where does the security manager fit into the organizational hierarchy?
A. Just as the title implies, security managers and system administrators are most often considered to serve in a management capacity. The important tasks of developing security regulations, training staff, and monitoring implementation require that the security manager be vested with substantial authority. While the security manager is not to be confused with a superintendent or principal, he or she should be considered to be the system “boss.” If the security manager is not able to confidently address security miscues at even the highest levels of the organizational hierarchy, protecting system resources adequately becomes an impossibility. Nurturing Support within the Organization Even when an organization is committed to improving its information security, security managers often find themselves having to work harder than should be necessary to remind staff of the importance of each step in the security process. Fielding questions about the necessity of sometimes burdensome procedu
