The article presents a framework for managing security in the global information community. It focuses on protecting information rather than just systems, offering concepts for managing security in systems that span the globe and have multiple security policies. The framework defines the roles of security administrators, architects, and product vendors, and explains how security management relates to system, network, and infrastructure management.