The foundation for creating a security department is risk evaluation and training, and taking training out of the binder and using it in the field could be the key to a thriving program.
For a long time, security was its own entity in the IT infrastructure. Security and IT didn’t always see eye to eye, and there were often points of contention. Nowadays, as collaboration between the two has become more common, both IT and security are combining forces to better understand the risks and threats to the enterprise.
Next Generation Security is not just the focus of the Security Industry Association’s (SIA) ISC West 2013 educational program; it’s the means by which leading security professionals create enterprise-wide value through security.
Employers have long recognized that conducting due diligence on new hires is a mission critical task. When it comes to any position dealing with Information Technology (IT), the stakes go up exponentially due to the sensitive nature of access to data and systems that operate the company.
Let’s start with the basics: the reason we take off our shoes at the airport is because the shoe bomber tried to get a bomb on a plane. The reason we can only carry on 3-ounce bottles? Someone tried to get a liquid bomb on a plane. Body scanners? Underwear bomber. But what if we took a look at suspicious behavior of the people attempting these acts of terrorism instead of relying primarily on machines to do our dirty work?
Security officers are our first line of defense and work tirelessly for our protection. Behind the public face of the security officer lives an expertly prepared and ever vigilant professional who is well-trained and highly knowledgeable about their location and market.
Whistleblower tips are the most common method of detecting occupational fraud. Research by the Association of Certified Fraud Examiners shows that more than 60 percent of frauds are uncovered by tips; in organizations with a hotline in place, tips expose more than half of all frauds. Further, nearly 40 percent of tips are received from internal employees.
Awakened from a deep sleep by the midnight call, the corporate-level chief security officer of this Fortune 500 Company knew he was in for a nightmare. His director of security for the firm’s Texas manufacturing facility was on the brink of panic. “One of our employees gunned down, execution-style, a female coworker at the time-clock, fired multiple shots at other employees, and then blew his brains out in the cafeteria. The police are here. It’s bad – real bad.” The CSO knows how the rest of the story will unfold, because local management had severely underestimated future risks when the employee was involved in a serious altercation with the same coworker months earlier.