An inter-organizational community of practice for information security

Enterprises used to focus on technology when they deal with information security (InfoSec) risks. In recent years information security management system (ISMS) such as ISO27001 has been adopted to refine the roles of people and process under the paradigm of InfoSec. Some researchers have tried to address the importance of knowledge security protection. However, only few researches concern about the knowledge competency of InfoSec practitioners. This position paper describes an ongoing research which tries to adopt a community of practice (CoP), a widely used knowledge management (KM ) tool, to improve the security knowledge level of InfoSec practitioners.