Remember from the beginning of this book how Amy's day started? Now imagine how it could have been: For Amy, the day began like any other at the Sequential Label and Supply Company (SLS) help desk. Taking calls and helping the office workers with computer problems was not glamorous, but she enjoyed the work; it was challenging and paid pretty well. Some of her friends in the industry worked at bigger companies, some at cutting-edge tech companies, but they all agreed that technology jobs were a good way to pay the bills. The phone rang, as it did on average about four times an hour, and about 28 times a day. The first call of the day, from a worried user hoping Amy could help him out of a jam, seemed typical. The call display on her monitor gave some of the facts: the user's name, his phone number, the department in which he worked, where his office was on the company campus, and a list of all the calls he'd made in the past. "Hi, Bob," Amy said. "Did you get that document formatting problem squared away?" "Sure did, Amy. Hope we can figure out what's going on this time." "We'll try, Bob. Tell me about it." "Well, I need help setting a page break in this new spreadsheet template I'm working on," Bob said. Amy smiled to herself. She knew spreadsheets well, so she would probably be able to close this call on the first contact. That would help her call statistics, which was one of the ways her job performance was measured. Little did Amy know that roughly four minutes before Bob's phone call, a specially programmed computer out at the edge of the SLS network had made a programmed decision. This computer was generally known as postoffice.seqlbl.com, but it was called the "e-mail gateway" by the networking, messaging, and information security teams at SLS. The decision it had made was just like many thousands of other decisions it made in a typical day-that is, to block the transmission of a file that was attached to an e-mail addressed to Bob.Hulme@seqlbl.com. The gateway had determined that Bob didn't need an executable program that had been attached to that e-mail message, which (the gateway also determined) originated from somewhere on the Internet but contained a forged reply-to address from Davey Martinez at SLS. In other words, the gateway had delivered the e-mail to Bob Hulme, but not the attachment. When Bob got the e-mail, all he saw was that another unsolicited commercial e-mail with an unwanted executable had been blocked. He had deleted the nuisance message without a second thought. While she was talking to Bob, Amy looked up to see Charles Moody walking calmly down the hall. Charlie, as he liked to be called, was the senior manager of the server administration team and also the company's chief information security officer. Kelvin Urich and Iris Majwubu were trailing behind Charlie as he headed from his office to the door of the conference room. Amy thought, "It must be time for the weekly security status meeting." She was the user representative on the company information security oversight committee, so she was due to attend this meeting. Amy continued talking Bob through the procedure for setting up a page break, and decided she would join the information security team for coffee and bagels as soon as she was finished.

Questions:

1. What area of the SP 800-100 management maintenance model addresses the actions of the content filter described here?

2. What recommendations would you give Sequential Label and Supply Company for how it might select a security management maintenance model?