In my opinion information security management is a profession and not just a role that an employee ...