Answer:
Your Security Manager really does need timely information. Sending memos is outdated but sending an email works well. Ask your IS Manager to create an on-line form that any employee can complete and send to the Security Manager for disposition. This form should be used to report ANY security-related information that may require an investigation, for example:
First published on BankersOnline.com 1/30/12