A computerized management reporting aid for a mainframe security system

Commitment to security by the top management of an organization was recently ranked the most important and valuable component of a general security strategy in a survey conducted by the National Center for Computer Crime Data in Los Angeles. This, however, requires a complete understanding by management of the activities and progress in the security department. Conveying this information to management traditionally posed a problem, which has led the author to believe that management reporting techniques do not match the present needs. This article focuses on the results of a research project aimed at improving the management reporting capabilities of the TOP SECRET mainframe security system. Issues regarding the existing reporting facilities of this system, the possible use of a knowledge-based facility for management reporting and a technique created for the enhanced representation of management reports are discussed.