1. Where should the administration of the security function reside within the organization? (It means how to manage the security.)
Please see the attached file.
***This web site should cover everything that I might have overlooked***
Manage Security - http://e-docs.bea.com/wls/docs61/adminguide/cnfgsec.html
How to manage security half way around the world - http://www.csoonline.com/read/120105/ht_manage.html
Managing the Security Officer - http://www.bankersonline.com/security/gurus_sec070102c.html
Security Officer's Position Description - http://www.bankersonline.com/security/secposdes.html
The Security Director - ...
This solution explains how an administration must manage security within their own organization.