Risks exists not only in security operations, but in security administration.

Security Operations Risk

For many corporations, security operations and guard force deployment are based upon a one-dimensional risk orientation: a security violation or the appearance of a threat or hazard is met with a pre-determined response. But what if multiple threats occur, or a threat is misinterpreted, or there is an accident or error in the security response? What happens then?

Security in context is the term for real-time security evaluation that takes the full spectrum of context information into account: the broad general threat context, the immediate threat context, the historical context, and the security response context—as the threat or incident unfolds .

How much time does your security force spend documenting incidents and near-incidents? Or are only realized incidents recorded? Are all access violations considerd threats, or only those of outsiders?

Are the threats (inside and outside) for each realized and near incident clearly identified? Were the threats known, or something not on security's radar? Was there anything new about the threat that changes its risk value?

With a small training and awareness effort, and an incremental amount of time in officer report work, an ongong risk picture can be developed and maintained, with useful metrics. Implementing this low cost program can make the difference between a risk picture that is continually growing more out of date (updated annually or at longer intervals), and a risk picture that is always up to date and of real value in assessing situations and security operations.

Security Administration Risk

It is not generally realized that the quality and effectiveness of your security administration is a significant limiting factor in advancing your security program. You have finite resources on one hand, yet expanding security challenges on the other hand. By improving your security administration—and that includes reducing administrative risk—you can redirect your security resources toward improvement.

This session will examine technologies, processes and procedures that support Security in Context for your security operations.

This session builds on the following workshop preparation materials:

• Worksheet: Security Operations Data Capture
• Worksheet: Security Administration Risk
• Worksheet: Command and Control
• Worksheet: Security Risk Management Roles

Session Leaders:  Ray Bernard, President, Ray Bernard Consulting Services and James Connor, Principal, N2N Secure