PM-15

PM-15 CONTACTS WITH SECURITY GROUPS AND ASSOCIATIONS

Overview

Number	Title	Impact	Priority	Subject Area
PM-15	Contacts With Security Groups And Associations			Program Management

Instructions
The organization establishes and institutionalizes contact with selected groups and associations within the security community: PM-15a. To facilitate ongoing security education and training for organizational personnel; PM-15b. To maintain currency with recommended security practices, techniques, and technologies; and PM-15c. To share current security-related information including threats, vulnerabilities, and incidents.

Instructions

The organization establishes and institutionalizes contact with selected groups and associations within the security community:

PM-15a.

To facilitate ongoing security education and training for organizational personnel;

PM-15b.

To maintain currency with recommended security practices, techniques, and technologies; and

PM-15c.

To share current security-related information including threats, vulnerabilities, and incidents.

Guidance
Ongoing contact with security groups and associations is of paramount importance in an environment of rapidly changing technologies and threats. Security groups and associations include, for example, special interest groups, forums, professional associations, news groups, and/or peer groups of security professionals in similar organizations. Organizations select groups and associations based on organizational missions/business functions. Organizations share threat, vulnerability, and incident information consistent with applicable federal laws, Executive Orders, directives, policies, regulations, standards, and guidance.

Guidance

Ongoing contact with security groups and associations is of paramount importance in an environment of rapidly changing technologies and threats. Security groups and associations include, for example, special interest groups, forums, professional associations, news groups, and/or peer groups of security professionals in similar organizations. Organizations select groups and associations based on organizational missions/business functions. Organizations share threat, vulnerability, and incident information consistent with applicable federal laws, Executive Orders, directives, policies, regulations, standards, and guidance.

Enhancements