Discuss the fact that general management, IT management, and information security management are responsible for implementing information security to protect the ability of the organization to function.
Relate to students that information security is a management issue in addition to a technical issue; it is a people issue in addition to the technical issue.
Explain that to assist management in addressing the need for information security, communities of interest must communicate in terms of business impact and the cost of business interruption, and they must avoid arguments expressed only in technical terms.