Why does ISC2 insist on secrecy of its operations?

[dwinner]

This is a good test for this "Community". Does this Community mean anything? Is it genuinely intended to create effective dialog? If so, we will see a response to this simple and very reasonable request. If not, then we can regress to the petition (500 letters) process. 

[rslade]

> dwinner (Newcomer I) posted a new reply in Welcome on 12-15-2020 03:07 AM in the (ISC)² Community :

> This is a good test for this "Community". Does this Community mean anything?
> Is it genuinely intended to create effective dialog? If so, we will see a
> response to this simple and very reasonable request.

Hear, hear! Well said! Absolutely spot on!

(Nice to see you've finally gotten active.)

(Kuwait?)

====================== (quote inserted randomly by Pegasus Mailer)
rslade@gmail.com rmslade@outlook.com rslade@computercrime.org
The only reason an organization has dead wood is that management
either hired dead wood or it hired live wood and killed it.
- Walter Deming
victoria.tc.ca/techrev/rms.htm http://twitter.com/rslade
http://blogs.securiteam.com/index.php/archives/author/p1/
https://community.isc2.org/t5/forums/recentpostspage/user-id/1324864413

[GJackson]

Dear Steve,

I have shared all of your feedback internally, but wanted to provide an update on the additional steps the organization is taking.  

Regarding policies, including those related to the election, we are working on enhancing our FAQs, as well as looking to create additional content for our members to better understand how these activities are managed. We want to ensure that members who wish to learn more have this information available to them. 

On the question of organizational updates, we are looking at ways to better communication to the members, and hope that moving into 2021 you will see some additional content about the organization on a more frequent basis. While we are still trying to validate any motion regarding minutes, we think these more frequent updates will help lessen the concerns on organizational activities.

Finally, we already discussed why we cannot release the individual vote totals. However, to better gauge the interest of the membership, we are happy to provide some additional detail around our most recent election. The following link should take you to the Member Talk page where we have updated this communication with the vote totals. 

https://community.isc2.org/t5/Member-Talk/Why-does-ISC2-insist-on-secrecy-of-its-operations/m-p/4170...

We are happy to report that this year was one of our most successful years for voting, and based on similar organizations we are above the average for participation.  That is a testament to the interest of our members. 

Moving forward, we recognize your desire to see more communication from the organization on its activity. It is our hope that moving into 2021 we can improve our standing with you.  Thanks again for your time and feedback.

Kind regards,

Graham

[mencik]

Graham,

This is a good start, and I hope it continues. I will note that updating a FAQ, while a good thing, is not the same as publishing policies. If the ISC2 Staff or Board cite policy as the reason not to release some kind of information, then the person citing the policy better be able to produce a copy of that policy and show who adopted it and when. Failure to produce said policy is indictive of the fact that no such policy really exists. 

It is for that main reason that I want the Members only section of the ISC2.org website to have a spot for all such policies to be posted, along with the minutes of the Board and Membership meetings. The minutes should clearly indicate when a particular policy was voted on and adopted.

Thank-you for your help in this matter. I'm only replying to this post, and not the other two places where you posted the same message.

Steve Mencik
CISSP, ISSAP, ISSEP #10288

[dwinner]

Good start Graham. Thanks for showing an interest in what at least a few members are interested to know. Engaging the members is a good idea. You have shown us that there is some value in contributing to this community.