Corporate Security and the Organisational Frontline

1. Corporate Security and the
Organisational Frontline
Paul Murphy
Manager Infrastructure Security, GHD Pty Ltd
HR Leadership 2003 National Conference
1-2 December 2003

2. Scope of Presentation
 Understanding the Security Challenge: The New Threat
Environment
 Issues for Corporate Security Programs
 Implications for the enterprise HR strategy
 Implementation
HR Leadership 2003 National Conference
1-2 December 2003

3. Understanding the Security
Challenge: The New Threat
Environment
 Focus on ‘New Threats’
September 11
Anthrax & NBCR Threats
Bali Bombing
Suicide Bombings
HR Leadership 2003 National Conference
1-2 December 2003

4. Understanding the Security
Challenge: The Existing
Threats
 Crimes Against Business
Theft
Fraud
Extortion
Product Counterfeiting
HR Leadership 2003 National Conference
1-2 December 2003

5. Understanding the Security
Challenge: The Existing
Threats
 Crimes Against Employees and Customers
Physical Violence
Theft
Intimidation / Stalking / Harassment
HR Leadership 2003 National Conference
1-2 December 2003

6. Issues for Corporate Security
Programs
 Privacy
 Profiling and Data Mining
 Public and Staff Perceptions of Security and
how it should be managed
 Legal Responsibilities
 Cost
 Risk Profile
HR Leadership 2003 National Conference
1-2 December 2003

7. Implications for the enterprise
HR strategy
 Security Management – needs to be a corporate approach
 Similar approach to the Management of OHS&R and
environmental risks
 Security Management Planning is the process an
organisation undertakes to ensure it is managing its
security issues, within the context of a business risk
management framework
 Achievement and maintenance of the appropriate level of
security risk requires:
Security treatments, infrastructure, management
arrangements (the three legged stool)
HR Leadership 2003 National Conference
1-2 December 2003

8. Implications for the enterprise
HR strategy
HR Leadership 2003 National Conference
1-2 December 2003

9. Implications for the enterprise
HR strategy
Security Management Framework
 Security Policy and Management
 Security Management Planning
 Security Risk Assessment
 Business Continuity (Risk Recovery)
HR Leadership 2003 National Conference
1-2 December 2003

10. Implications for the enterprise
HR strategy
Security Administration
 Security Management
 Commitment and Sustainability
 Security Committee
 Security Risk Context
HR Leadership 2003 National Conference
1-2 December 2003

11. Security Management Value
Chain
STRATEGY
SECURITY
POLICY AND
MANAGEMENT
FUNCTION
SECURITY
MANAGEMENT
PLANNING
RISK
SECURITY
RISK
ASSESSMENT
SUSTAINABILITY
BUSINESS
CONTINUITY
(RISK RECOVERY)
HR Leadership 2003 National Conference
1-2 December 2003
CONTINUOUS
IMPROVEMENT
SECURITY
RISK
MANAGEMENT
SECURITY MANAGEMENT

12. Implications for the enterprise
HR strategy
Security Administration
 Security Management
 Commitment and Sustainability
 Security Committee
 Security Risk Context
HR Leadership 2003 National Conference
1-2 December 2003

13. Implications for the enterprise
HR strategy
Security Risk Assessment
 Criticality Assessment
 Threat Identification
 Vulnerability Assessment
 Risk Assessment
 Risk Reduction Program
 Monitoring and Review
HR Leadership 2003 National Conference
1-2 December 2003

14. Implications for the enterprise
HR strategy
Business Continuity (Risk Recovery)
 Response Planning
 Business Recovery
HR Leadership 2003 National Conference
1-2 December 2003

15. Concluding Remarks
HR Leadership 2003 National Conference
1-2 December 2003

16. Questions ?
www.ghd.com.au/services/infrastructuresecurity
HR Leadership 2003 National Conference
1-2 December 2003