impact of Security. I SPEAKER'S BIOGRAPHY The Speaker is the former - - PDF document

SLIDE 1

GSX 1201s PRESENTATION TITLE: ORGANIZATIONAL SECURITY CULTURE:A NEW BUSINESS PARADIGM ABSTRACT "Security is everybody's Concern" is the most frequently expressed among the basic principles of Security; but how it's done is just as frequently lefi out. Organizational Security Culture is achieved when every member of the organization contributes to its security in thoughts, words and d*eds. Educating every employee in an organization on the fundamentals of security is the first step towards the development of a Security

• Culture. Security after all is ensuring the attainment of the Company's goals.

Statistics show that 80% of losses in an organization are caused by the members. The

• ther Z$s/o happens because the members didn't do anything about them. The ideal

security measure an organization needs to protect its resources is having everyone participate in security. The first step is to have all employees take a Security Awareness

• Test. The result would show the group's Security Quotient. This will be used for a

Security Culture Development Program. A higher Security Quotient after a set period will show the program's success. Loss reduction will then be evident. This quantifies the impact of Security.

I

SPEAKER'S BIOGRAPHY The Speaker is the former Chairman, Technical Committee of the Philippine Commission

• n Higher Education that is formulating the Program for Bachelor of Science in lndustrial

Security Administration. He wrote the book, "TheArt and Science of Security" which is circulated globally. His book was given a five star rating in its review He is an arcredited subject matter expert on Organizational Security by the Bangko Sentral ng Pilipinas He developed security concepts to quantiff the effectivenes$ of security. He has 30 years experience in Security. He is a member of the Philippine National PolieeAdvisory Counoil

• n lndustrial Security. He is a former training Director of the Naval lntelligence Officer's

Course. SPEAKER DETAILS: Name: Joel Jesus M. Supan Job Title: Chief Executive Officer

Corfi pany: Stonewall Security Concepts

Country: Philippines

E-mail Address: stonewall. sec8 1 @yahoo. com Mobile No:+632 917 889 2154

SLIDE 2

About the Speaker

ORGANIZATIONAL SECURITY CULTURE: A New Eusiness Faradigm Speaker: JOELJESUS M. SUPAN CLQBAL 5ECURITY FXTHANGE

l;";;;;;;.;;;;-J;-l

8.12 SEFTEMBER 2O19 McCORMtaX PLACE jCfllC.irGO, lL GsX.OR€ r S€sXt? JOELJESUS M. SUPAN TOPIC OUTLINE

• 1. Security Awareness Jbst
• 2. Oryanizational fucurity Culture Defined
• 3. Security Fundamentals {B?B} - Rationale for

Organizational Security Culture

• 4. How to achieve Orpnirational Security Cutture

FiELD OF €XPERTISE 33 Ysars Practice 0f 0rganizational Security & Securlty Services Management & Eduration Past Chair- CHED TC B5ISA Bangko Centrai Certified Secur;ty 5ubjefi Matter Erpert Pl'lP 5051A Advisory Counci! Licens€d Security Consuitant Securit/ Aulhor tdticatcr inventcr DESIRED OUTCOME For the participants to be familiar with the Concept of Organirational Security Culture as a new Business Paradigm, what it is, its rationale and howto achierrc it. SECURIry AWA,RTN ESs QUOTI ENT TEST

s

How do 1t0u Perceive SecuritY? How do you respond to Seeurity lssues and Situations?

:J'

SECURITY CULTURE 1

#,: *::ff :;ffi r,T:T,gf*:,, €

' that is based on the fundamental :

&

PrinciPlessecut,*_^ ., u #

' '- :,..qi,#,,riu.,,,,..,,",. #ffi

"

SLIDE 3 Security Fundamentals {B2Bi Rationale for Organizational Security Culture I N DI CATORS OF ORGAN IZATIONAL 5FCU RITY CU LTU RE

• 1. Ernployees have collectively internalized Security;
• 2. They manifest understanding of security in words and in deeds;
• 3. They actively contribute ideas to develop security measures;
• 4. No loss has been incurred due to employee ignorance and

negligence. Security Fundamentals {82Bi Ratisnale for Organizational Security Culture

$

Security Fundamentals No.1 The basic objective oi anybusiness:stc hat.EI irii:i-rriu'. The basic nrissron of any business is n.rg!'.e rt*r,*y, tuw: 'the Art snd dkw of gciw 2012, Security Fundamentais No.3 The enemies of security are hazsrrii, ihieats, r-i:;hs, disrui:t!c,ns, mishaDs, ernergencies, rrisis , Cisastris and ior-s. Security Fundamentals

• No. 5

Se.uriry is a prediclabie enr.ironment to ensure the attainment of Organi:ational iBusiness ) Objectives. Security Fundamentals {82B} Ratio na le for Orga nizationa I Security Cultu re R - Resource T - Tirne 5 - Goal Security Fundamentals Nn1 E.ery company J-as{:uilre ig €ssential to achieve b,'lsiness

• i:jectives.

ft€sources sre the "Oh'jecis ef Security" tuM&: "The Ar, @d kiqct of Sewilv, Nl2 Security Fundamentals No.4 ldishaps and i-li5rilptiofti are caused by the ccnfluence af a hazard, lls object and th€

• pportunity for both tb

ffieet at a specific time, place, and conditions. Soorcei "IieA/f afd 9ree sf kc6iq, mtz. Security Fundamenta ls (B?Bi Rationale for Organizational Security Culture Functional Relationships of Resources

*H*

W-

nffi.ffi

ffi

Threat Differentiation Modei Security Fundamenbls {82B} Rationale for Organizational Security Culture R€SOTJRCES HAZARDS & OBJECTIVE$ THREATS Security Defi nition Framework Oiiact of P@ntiYe ''eaEffi

ffiS&

rnneAr ki4

€@

&$

ffiffi

Hazard to Loss Progression Model w *lhe P{t&d Scia@ al Setsity" 2012 bure: '|he Art end t*tM of Secwify, 2072.

SLIDE 4 Security Funda nnentals {B2B} Rationa le for Orga nizationa I Secu rity Culture Security Fundarnentals {82B} Rationale for Oryanizational Security Culture Security Fundamentals

• No. 6

The Principles of Securift are indispensabie bases for the creaticn of Business Security Plans and Programs tuwe: -fte Ad and scilro el kdvily, 2Ar2. Security Fundamenbls t,lo. 8 Security lntegraticn and Convergence are programs by which ail the Aspects of Security are put together to complement and supplement each other. tuee: "'lhe Art @d *iae d klri'I,, elz Organizational Security Culture ls done by incorporating the Basic Security Concepts in all the Aspects 0f Business Adrninistratiol and Op€rat'on r Thefe is no absolL$€ 6ecuri9 " Securily is good ody es its weakesl link Hjgh relatiye iecurity can be achieyed in depth . No two fasilities haye lhe safie secwity nesds tr Hatards may c6me from within and rithout tr There is no imp€nekable barrier / s€e.urity is everybody's concern Basic Principles of Security Security Fundamentals

• No. 7

The Aspects l.li Securitv are the measures by wlrich Security c:n be achieved gptw:'ft8 Attotd sdw oig€irrtv. mQ, Security Fundamentals

• No. 9

Secr:rity has a neler- ending Functional Cycle

• f Preraention, Response,

snd li?vestiBation Constraints i n Dewloping Organizational Security Culture Security Domains are perceired to be different turfs. Security Domain are the appiications of fucurlty Aspects 1 PBfssrsei :i{iir:i9,h/ .:.. O*N1 rdliokr :ie.i",iilr.' ; 3, Information se{ilrity : 4. Environment Security

• 5. ReFtation Se&rity
• 6. Plrysical Se.urity

Aspects Security Security Funda mentals {828} Rationa le for Orga nizationa I Security Culture Security Fundamentals {BlB} Rationa le for Orga nizationa I Secu rity Cu ltu re Stoner4.all Security Model for Security lntegration Organizational Security Culture De\relopment tffifrS mscr Oper:tional Objectives 0f Security Organizational Security Cuhure Derclopment $

,{

s @ ;-.**"*^)E,

SfcuRrY cutluBE is an e5tablilhed 5lstem of €ls, beliefs af,d €tnic of af, orgs;nton thal i5 basd on tle fund€flwtal $iil pnnapls suritY. U,

b* t,+ - *#l

U

sore; "Irre itrtedgcidr@ al56wit a 2012 Confusion in Security Domains

SLIDE 5 Organizational fucurity Culture Development Orga nizationa I fu curity Culture Development Constrai nts in Developi ng Organizational S€curity Culture Ihe mindset of the old corivention is predispased to the use of furre and i$riif iiation i0r sei:*rii't Step 2 Create and adcpt a Security Pc{rcy Stat€rfi ent and Reguiation with the rorrespanding rationale,

• bjectives, dissemination
• proceCures. physical

support and toals for enforcement hwe: 5he *t ond k:@e of kcwily, 2f12 Step 3 lnclude Security Duties and Responsibilities in the lndividual Emplcyee's 1..*'i, Resuli Ar€ar and Prndurtrvity lndicatar$ Tyranny of "For Compliance" Organizational Security Culture Developrnent Step 1 Adopt an 0rgan!ratr*nai seft.i!-ity l-'llliosophV that is based on the Prlncipies and Aspect af Securlty and their inteEretion sorc; 'IteAra@d5.ie@ d sean;V, fr1f Stonewall Security Model for Security lntegration Oryanizational Security Cuhure Development Aspects Security PERSOI'INEL SECURITY Ensures that all Empioyers ere capablg reliable, fustwordry, lqel, healthy and happry. ELFMENTS

• 1. Personai Hisbry

?. Due Diligence

• 3. t{iueiitlc5 & Tr?inarls

,1. 5G!-ruisiix;

• 5. fueluation
• 6. Debriefiq

Step 2 Create and adspt a Securily Poiicy Statement and Regulation with the corresponding rationale,

• bjectives, disseminatron

prr:cedures, physical suppcFr and tools for en{orcement Step 4 Educate ali employees on the fundamentals of Security upc,n hiring. Security is not c$vered in an academic undertaking. OPFRATION SECURTTY Ensurs that all Policip, Systems, Procedurd Rulerand Regulatiors arefullowed and enforced Organizational Security Culture Developrcent Qrganizational Security Cnlture De\€lopment PERSONNEL SECURI T Ensures that all Emplopes are capable, reliable, trl6t$r6rttry, lofaf healtky ard happy. ELEMENT5

• 1. Personal Hbbry
• 2. Due Oiligence
• j. €ei*cat!*r & t"r'sining

4.5speNrsiai'

• 5. Evaluedon
• 6. Debriefir€
• {€uar: -ihe^troni3t ienecfsecrny?Gr}. Business Organization as a Vehicle to it5 Objective

So!e.'' e,4.tordsderFe of ktqitf, 2At2. fupects Security So@j "'?eA.{srd.tjffi of s€cg'r'.y, ,{tlz. fupects Security

SLIDE 6 Step 5 Provide a monitoring system fsr en']ployee conduct bi/ enjoining everyone to contflbute t0 th€ protection 0f company res0urces. ORGAN IZAT] ONAL SECU RITY CULTURI: A New Business Paradigm RESOUR{FS HAZAROS & OBJ€CTfI'ES THREATS 5e.uritry ensures the attal nment of Organizationai Objectives. TAKEAWAY Securology: the study of being free from care. 5e cura {Latinil without carg free flom care Logia {Greek): study of TAKEAWAY Security is the bridge to every dream... to every goal. THANKYOU. Have a nice ay and a fruitful convention hw

• lhe Att osd kkw of Sewity, 2OtZ

SLIDE 7

*g= ;gi*ss-;

nF*il*IEiFiii

fr sa ggt

EgaiiiiiiEiii

SLIDE 8

1f$f*gE,gF$u*n.EiaE

c

s$

+'Q {D

E

8EE

luE*e* i eeasEi*Eg.;*e;fi'F Er

FE E

E

EiEEEg€EEgfiEEgEE$FiifiEgEa*ii*

tcsE; t

E$r*E a;sHFE E**8fl8fr

9oc0c

t:

Eeue u *cgsg;- gFflgg 5EggegflE Faa,i a,=

E;=;;

S

3.EAaO i=a 6.A 95'o-o-o- FF-o-o aE i.

• ,dtoh-do)r

Jg

Fscggtggsg$p*t*sF.EF 3.tg ggEgg sgaa+i* e 5

2'

fr|EE gEe$E EEiF FEF{# E. EF==.

gE ,

=nEg=tggEEelggge*ggE'Egi;gggE,*guggg

fr HE 5

6 g€ bfi8Egg n faaa =g8e.aaaa- Egaaa iEaa6aa.

tL f 3r f{ F r (\ (t} tf

>-

3aaa.l Fl '- '---o = n >, "..lll..(B":L

Y; g s

;EPS'i.

Hn gt:e ;:li€

t- Fi$ a:lit ?E e*€ u*:es

EE ;ts;t€*E

Hu f g' ;ffE!

a

F'r

t{

tro

?,2 4

lJdzo

Fi ,; F FEl Q Y, l'-.,t U

\LJ!

• *5>

zu"

,-r

\J

F

O

SLIDE 9 id,. E (!

z

L .:(l}

io

• $
• t't

(u

• E
• E

(E .9 (o

z

e" $ :I ro

c

.jj

3

• $

E

t

$

• >

(g

• .

E

• (J

.g

lc

c $ x.

a

• (l)+j
• L

dat $o ef

<o

c)

• ()

@

: E E

Fe

= E I P H

• ,r

I'L

• = .s : E .F'E

d

'ga:pilE B;

5

F'E :-fl $ E gE

h i

9;:ggEFE=EafiEsHs

gfiF gEFIFEEg fig fig*g$E

u

fi

.a?q

• .
• OQ 4.3^^,i\

J =-o O tU -o O 1:

• O G,o'{J'E (l)C

O_

ni

c"j

c{

c{

e€ E o, d =P

ci fi:P

;sisF.

*u LiE tstF;8fi5

egi**;gtF-is'g5,FFEg"EHEfli

+;*UEEEEEEg-EEE*EsFfigEEgiFiEg

sg P abr

€s : ft€:

t g r * s*€ i

iiaieliE ifu*il

gE= ggi iEg*ifi E*Fu *uu*au

FPSRN

(''s

• c

)rrn

• L

T,

7 fr e Fg E* E ! s

t

be,

E B ; E tq giglt glg

*tg *g.*E,g,

F:S

ggu€ 6ian€ u*i^ 5gEtf, Efrg $eq e#:

$,Ers**FEEEg'ag3EsucEa=Ei€'tEi'uESH

E F HAE E I

s E *:f e; *F*= e E E *: ieEE*E gg*= i$g

gE l iE*l$

=sPs*9