SECURITY CULTURE: A New Business Paradigm Speaker: JOEL JESUS M. - - PowerPoint PPT Presentation
SECURITY CULTURE: A New Business Paradigm Speaker: JOEL JESUS M. - - PowerPoint PPT Presentation
ORGANIZATIONAL SECURITY CULTURE: A New Business Paradigm Speaker: JOEL JESUS M. SUPAN About the Speaker JO JOEL JE JESUS M. . SUPAN DESIRED OUTCOME For the partic icip ipants t to be famil iliar wit ith the Concept of Organizational
About the Speaker
JO JOEL JE JESUS M. . SUPAN
DESIRED OUTCOME For the partic icip ipants t to be famil iliar wit ith the Concept of Organizational Se Security Cult lture as a new Busin iness Paradigm, what it it is is, , it its ratio ionale and how to achie ieve it it. .
TOPIC OUTLINE 1. . Security Awareness Test 2. . Organizational Securit ity Cult lture Defin ined 3. . Security Fundamentals ls ( (B2B) - Ratio ionale for Organizational Security Cult lture 4. . How to achie ieve Organizational Security Cult lture
SECURITY AWARENESS QUOTIENT TEST How do you perceive Se Security? How do you respond to Security Is Issues and Sit ituations?
ORGANIZATIONAL SECURITY CULTURE is is an establi lished system of valu lues, belie liefs and ethic ics of an organization that is is based on the fundamental prin incip iples security. .
. .
IN INDICATORS OF ORGANIZATIONAL SECURITY CULTURE
- 1. Employees have colle
llectively in internalized Security;
- 2. They manif
ifest understanding of
- f security in
in words and in in deeds deeds;
- 3. They activ
ively contrib ibute id ideas to to develop security measures;
- 4. No
No loss has been been incurred due to to employee ignorance and negli ligence.
Securit ity Fundamentals (B2B) Ratio ionale le for Organizational l Securit ity Cult lture R R - Resource T T - Tim ime $ $ - Goal l
Th The basic ic objec jecti tive of any busin iness i is s to have money. Th The basic ic miss issio ion of any busin iness is is make money. Se Securi rity Fundamentals ls No. . 1
Source: “The Art and Science of Security, 2012.
Every ry c company reso source is is esse ssentia ial l to achie ieve busin iness
- bjec
jectiv ives.
Securit ity Fundamentals (B2B) Ratio ionale le for Organizational l Securit ity Cult lture
Se Securi rity Fundamentals ls No. . 2 2 Functio ional l Rela latio ionship ips of f Reso sources
Source: “The Art and Science of Security, 2012.
Reso sources are th the “Objects of Security”
Th The enemie ies of f se securi rity are hazards, threats, ris risks, disr isruptio ions, , mish ishaps, emergencie ies, , crisi risis , , dis isasters and lo loss ss. Hazard to Lo Loss ss Progressio ion Model
Securit ity Fundamentals (B2B) Ratio ionale le for Organizational l Securit ity Cult lture
Se Securi rity Fundamentals ls No. . 3 3
Source: “The Art and Science of Security, 2012.
Securit ity Fundamentals (B2B) Ratio ionale le for Organizational l Securit ity Cult lture
Se Securi rity Fundamentals ls No. . 4 4 Mish ishaps and disr isruptio ions are caused by the conflu luence of a hazard, , its its objec ject and th the
- pportunit
ity for r both th to meet at a sp specif ific ic tim ime, pla lace, and condit itio ions. Th Threat Dif ifferentia iatio ion Model
Source: “The Art and Science of Security, 2012.
Securit ity Fundamentals (B2B) Ratio ionale le for Organizational l Securit ity Cult lture
Se Securi rity Fundamentals ls No. . 5 5 Se Securi rity is is a predic ictable le envi vironment to ensu sure th the attain inment of Organiz izatio ional l (B (Busin iness ) ) Objec jectiv ives. Se Securi rity Defi finit itio ion Framework rk
Source: “The Art and Science of Security, 2012.
$
Securit ity Fundamentals (B2B) Ratio ionale le for Organizational l Securit ity Cult lture
Se Securi rity Fundamentals ls No. . 6 6 Th The Prin rincip iple les of f Se Securit ity are ind indis ispensable le b bases for r th the creatio ion of Busin iness Se Securi rity Plan lans and Programs Ba Basic ic Prin rincip iple les of f Se Securit ity
Source: “The Art and Science of Security, 2012.
Securit ity Fundamentals (B2B) Ratio ionale le for Organizational l Securit ity Cult lture
Se Securi rity Fundamentals ls No. . 7 7 Th The Asp spects of f Se Securi rity are th the measures by which ich Se Securi rity can be achie ieved Asp spects Se Securit ity
Source: “The Art and Science of Security, 2012.
1.
- 1. Personnel
l Se Security 2.
- 2. Operations Security
3.
- 3. In
Information Se Security 4.
- 4. Environment Se
Security 5.
- 5. Reputation Se
Security 6.
- 6. Physical
l Se Security
Securit ity Fundamentals (B2B) Ratio ionale le for Organizational l Securit ity Cult lture
Se Securi rity Fundamentals ls No. . 8 8 Se Securi rity In Integratio ion an and Co Convergence are programs by which ich al all l the Asp spects of Se Securi rity ar are pu put together to comple lement an and su supple lement eac ach other. St Stonewall ll Se Securit ity Model for r Se Securi rity In Integratio ion
Source: “The Art and Science of Security, 2012.
Securit ity Fundamentals (B2B) Ratio ionale le for Organizational l Securit ity Cult lture
Se Securi rity Fundamentals ls No. . 9 Se Securi rity h has a never- endin ing Functio ional l Cycle le
- f Preventio
ion, Resp sponse, and In Investig igatio ion Operatio ional l Obje jectiv ives of f Se Securit ity
Source: “The Art and Science of Security, 2012.
Organizational Security Cult lture Develo lopment
Is Is done by inc incorporatin ing th the Basic ic Securit ity Co Concepts in in all ll th the Asp spects of f Bu Busin iness Admin inis istratio ion and Operatio ion Organiz izatio ional l Se Securit ity Cu Cult lture
Organizational Security Cult lture Develo lopment
Se Securi rity Domain ins are perceiv ived to be dif ifferent turf rfs. Se Securi rity Domain in are th the appli licatio ions of Se Securit ity Asp spects Co Constrain ints in in Develo lopin ing Organiz izatio ional l Se Securit ity Cu Cult lture Co Confu fusio ion in in Se Securit ity Domain ins
Source: YourTemplateFinder
VIP Security IT Security National Security Industrial Security Corporate Security Home Security Insurance Business Continuity ERT Food Security Human Security SAFETY
Organizational Security Cult lture Develo lopment
Th The min indset of th the old ld conventio ion is is p predis isposed to th the use se of f force an and fort rtific ificatio ion for r se securit ity Constrain ints in in Develo lopin ing Organiz izatio ional l Se Securit ity Cu Cult lture Tyranny of “For Compliance”
St Step 1 Adopt an an Organiz izatio ional l Se Securi rity Philo ilosophy th that is is bas ased on th the Prin rincip iple les an and Asp spect of f Se Securit ity an and th their ir in integratio ion St Stonewall ll Se Securit ity Model for r Se Securi rity In Integratio ion
Source: “The Art and Science of Security, 2012.
Organizational Security Cult lture Develo lopment
Organizational Security Cult lture Develo lopment
Cr Create and adopt a Se Securi rity Poli licy St Statement an and Regula latio ion with ith th the corr rrespondin ing ratio ionale le,
- bje
jectiv ives, dis issemin inatio ion procedures, physic ical l su support and tools ls for r enforcement Asp spects Se Securit ity
Source: “The Art and Science of Security, 2012.
OPERATION SE SECURITY Ensu sures th that all all Poli
- licie
ies, Systems, Procedures Ru Rule les an and Regula lations ar are fol
- llowed an
and enforced
St Step 2
Organizational Security Cult lture Develo lopment
Cr Create and adopt a Se Securi rity Poli licy St Statement an and Regula latio ion with ith th the corr rrespondin ing ratio ionale le,
- bje
jectiv ives, dis issemin inatio ion procedures, physic ical l su support and tools ls for r enforcement Bu Busin iness Organiz izatio ion as s a Vehic icle le t to its its Objec jectiv ive St Step 2
Organizational Security Cult lture Develo lopment
In Inclu lude Se Securi rity D Dutie ies and Resp sponsib ibil ilit itie ies i in the Individual Employee’s Key Resu sult lt Areas and Productiv ivit ity In Indic icators Asp spects Se Securit ity
Source: “The Art and Science of Security, 2012.
PERSONNEL SE SECURITY Ensu sures th that all all Employees ar are cap apable le, relia liable le, tru trustworthy, lo loyal, l, heal althy an and hap appy.
St Step 3
ELE LEMENTS 1.
- 1. Personal
l His istory 2.
- 2. Du
Due Di Dilig ligence 3.
- 3. Education & Train
inin ing 4.
- 4. Su
Superv rvision 5.
- 5. Evaluation
6.
- 6. De
Debrie iefin ing
Organizational Security Cult lture Develo lopment
Educate all ll emplo loyees on th the fu fundamentals ls of f Se Securi rity upon hirin iring. Se Securi rity is is not t covered in in an academic ic undertakin ing. Asp spects Se Securit ity
Source: “The Art and Science of Security, 2012.
PERSONNEL SE SECURITY Ensu sures th that all all Employees ar are cap apable le, relia liable le, tru trustworthy, lo loyal, l, heal althy an and hap appy.
St Step 4
ELE LEMENTS 1.
- 1. Personal
l His istory 2.
- 2. Du
Due Di Dilig ligence 3.
- 3. Education & Train
inin ing 4.
- 4. Su
Superv rvision 5.
- 5. Evaluation
6.
- 6. De
Debrie iefin ing
Organizational Security Cult lture Develo lopment
Provi vide a a monit itorin ing system for r emplo loyee conduct by enjo join inin ing every ryone to contrib ibute to th the protectio ion of f company reso sources.
Source: “The Art and Science of Security, 2012.