A community knowledge base for IT security

A formal community knowledge-base prototype is designed to benefit IT security managers in a variety of organizations. By relating and formalizing applicable knowledge content, the knowledge base would let users traverse between different types of advice from different disciplines while focusing on those aspects of information security most pertinent to their organization's needs. Methodology are needed to help IT security managers collaboratively manage and extend their knowledge base. To accommodate security managers working in different sectors, each knowledge fragment need to be annotated in the knowledge base to indicate its application area and the organizational size, type, and security culture. Trust mechanisms in the knowledge base appropriately annotate every knowledge fragment with relevant metadata, quality ratings, and process details for assessing its effectiveness in practice.