|
Security: What is it? Who needs it? And how much does it cost?
Like it or not the world has changed radically since 9/11. The probability is that we are never going back to the relative passivity of security operations of the past quarter century. Today’s absolute requirement for sound planning and properly executed security measures has become an urgent fact of business life, as well as a moving target for executives and others charged with security responsibilities. Those of us in the security field have to constantly monitor the evolving threats that our organizations face while we struggle with regulatory compliance and the commoditization of security tasks. When planning for these challenges, security budgets have to address overlapping functionality as well as the goals and needs of various business units. Security executives have to work within an organizational structure yet be responsive to many competing interests while ensuring that the business will endure and prosper. This is a tough challenge, but can be significantly enhanced by sharing responsibilities and engaging trusted security partners.
We believe
it’s important to perceive security as a service. Proper security is never a
particular piece of equipment, system, or a procedure that will result in a
state of immunity to crime or terror. Proper security is a wide-ranging system
of integrated security components, personnel, policies and training, which exist
to ensure that the business maintains a safe and secure posture. Appropriate
importance ought to be attached to supporting these elements by partnering with
qualified security vendors. Sharing responsibilities and engaging a trusted
security partner can significantly improve the task of managing complex and
diverse threats. Security, once thought of as anything but a revenue producer,
has become a strategic part of a company’s operations and well-being. While the
security function is always going to be subordinate to business needs, a
comprehensive study of the vulnerabilities and an assessment of threats to a
business or institution needs to be done to manage risk and provide protection.
Observe the growth of Executive level security positions, Chief Information
Officer, Chief Security Officer, Director of Corporate Compliance, and you begin
to appreciate the depth and challenge of security responsibility in the new
millennium.
A short list of the security challenges we face:
- Identity Management and Access Control
- Vulnerability Assessment
- Internal Fraud
- I/T Security
- Regulatory Compliance
- Workplace Violence
- Terrorism
- Doing Business Globally
- Supply Chain Security
- Protecting Intellectual Property
While
security has traditionally has been managed by in-house teams, increasing
threats are forcing businesses to look at new ways of supporting their security
capabilities, and in many cases enlisting the help of a third party makes more
sense than doing it in-house. There's also growing confidence that the managed
security services have the requisite skill sets and experience to handle
important security roles. Security is expensive, that’s for certain; however,
when you consider the costs of improper levels of security, the loss of life or
business interruption that can occur with weak programs, can you really afford
to use the low bidder? The real questions which need to be asked are, “What are
the threats my business is facing?” and “What would it mean to the business to
suffer losses in these areas?”
Within the
answer to those questions are found the true cost and the true value of
security.
|