Sunday, August 22, 2010

The Top Ten Things a Security Professional Can Do To Establish Credibility with Senior Management

Many people say that knowledge is power but my own experience casts doubt on such optimism. Although it would be nice if the "correct" answer, from a security standpoint, were readily understood and accepted by those we serve, this is rarely the case. It is for this reason that two of the most common truisms of the security field are as follows:

"Without the long-term support of senior management, a security program will eventually fail."
and

"Security professionals must consistently seek to understand the organization they serve."

I wholeheartedly agree with both of these statements and offer the following ten
tips on how to build credibility with senior management.

1. REMEMBER THE ROLE OF SECURITY: Security is a support function whose purpose is to assist the organization reach its goals and objectives. If we want to be taken seriously, then we should not argue that Security is an end in itself.

2. DEMONSTRATE A SOLID UNDERSTANDING OF THE CORE BUSINESS: There is more to an organization than security and other risk management functions. The failure to recognize this fact can lead senior management to view security as out of touch.

3. BE RESPECTFUL OF OTHER PEOPLE'S TIME: Time is in short supply and senior management has to consider the overall direction of the organization.

4. PROVIDE OPTIONS: It is a rare situation that only has one answer. When providing recommendations to senior management, it is wise to provide at least three options. While it is expected that the security professional will advocate for a particular course of action, the failure to point out other options may be viewed by some executives as a failure to be thorough.

5. DEMONSTRATE CARING FOR OTHER PEOPLE: Security professionals frequently deal with highly emotional issues. A failure to demonstrate caring from others undermines the very essence of the protective mission and leads to a loss of credibility.

6. DEMONSTRATE INTEGRITY: Security professionals are in a position of trust. It is not enough to simply avoid violations of law and organizational policy; the security professional must consider law and policy to be minimal standards of behavior and avoid even the appearance of impropriety.

7. ENDEAVOR TO BE CONSISTENT: Security professionals are under constant observation by employees and senior management alike. A failure to treat people or situations in a consistent manner may lead to the perception that the Security Department is arbitrary.

8. ACTIVELY PARTICIPATE IN CROSS FUNCTIONAL TEAMS: Participation in cross functional teams helps the security professional understand operational needs, establish rapport with counterparts from other departments and demonstrate a desire to assist the organization beyond his or her normal duties.

9. PRODUCE ADDED VALUE FOR THE ORGANIZATION: Security is a difficult concept to quantify. After all, is the absence or decrease in the number of security incidents an indicator that security is doing a great job or that security really isn’t needed? Utilizing existing security personnel to provide value added services without compromising the core protective function provides one means of demonstrating the worth of security to senior management.

10. BE DISCREET: Security professionals who handle sensitive organizational or personal matters with discretion are viewed by senior management as valuable assets.

These steps are simple, but they are definitely NOT easy.

By: SA Watson