An individual or process allowed to specify and manage the events which may generate a security message and to establish the action (s) to be taken for each security message type.