Home > Uncategorized > Security is not the point!

Security is not the point!

Articulating the Value of Security…

It’s an uphill battle to convince the decision-makers in any business that they need to invest in security. Why? Because deep down, all professional businesspeople think security is an annoying layer of cost and inconvenience.security_dreamer_high-res_4c

If you walk in and tell them, “We need more security,” they hear, “We need a more annoying layer of cost and inconvenience.”

Getting the buy-in for security products and services today means understanding what drives your company’s security purchase decisions—basically, what is going on in the mind of your bosses. Fear, uncertainty and doubt are not the cleverest tools to use anymore. The security industry is undergoing changes as it adjusts to the convergence of IT with physical security, and businesses are changing, too. Now businesses want something that sometimes seems like a foreign concept to the security profession: value. If you don’t adapt and start answering the questions your business is really interested in, you’ll never get the green light on new projects and upgrades.

Remember, nobody wants security; they want the benefits of security. That means that the housewife doesn’t want the finest deadbolt on the front door because of the excellence of its engineering or its impact resistance. She wants a comfortable, happy place to raise her family.

Businesses also want something other than security. If a bank manager has a mandate to reduce expenses related to bank tellers, she has a couple of options. She could fire all the tellers and lock up all the bank branches, but then the bank would have no interface with its customers. Or she could take all the money, put it in piles on the street corner under a clipboard that says, “Take what you want, but write it down so we may balance your account.” That wouldn’t work either, obviously.

The best solution for reducing teller expenses is to take the money, put in on the street corner locked in a box with a computer attached, and give customers a plastic card for authentication and auditing.

Security was never the point. The bank had a business objective and achieved it by using some security. That is how we all should think of security: as a way of helping our companies achieve the goals or value they seek.

Business managers, especially executives at the highest levels of an organization, have a very simple view of security: It is a tool in the corporate toolbox for enabling business. But they don’t even think of it as security.

The manager responsible for an online ecommerce business wants a few things. He wants to know who is using his Web site. He wants to ensure that each one can do everything on that site they need to do. He has a lot of people doing a lot of things, so he needs an easy way to manage it. And at the end of the day or the end of the quarter, he needs a report that tells him what has happened so he can improve customer satisfaction, reduce errors and increase profits.

In that example we have all four fundamental categories of security—authentication, authorization, administration and audit—but the manager doesn’t think of security once! That’s because security is not the point.

Focus on Value

I have suggested many times that, whenever possible, security professionals should purge the word “security” from their vocabulary. Instead, answer the questions inside your boss’s head, and don’t simply spout the ways security keeps bad things from happening.

Your upper management thinks in terms of money, not security. What people will be needed? What headcount can we reduce? How much will it cost? How much will we save? What new revenue can we earn as a result of this investment? And they think not in terms of security risks, but in terms of credit risk, market risks and operational risks. That’s where you can shine.

One U.S. company spent $35 million on physical security upgrades after 9-11, and $4 million on IT security upgrades. Last fall they failed their Sarbanes-Oxley audit because of poor security. How? Visitors were given a badge for the day, but they could still walk unescorted past cubicles with unattended computers logged into financial systems. At that moment the audit no longer had confidence in the integrity of the numbers. Anyone could have moved a decimal point or added a zero.

If you know your facilities need more security, tell your managers how it will help them measure or achieve compliance to regulations like Sarbanes-Oxley: You audit employee behavior, or lock up financial systems, or shred financial documents, or do background checks, or secure backup tapes. For any business problem, you should be prepared to help your management identify the ways that the authentication, authorization, administration or audit solutions you’re proposing will solve their problem, or help customers make the gains they hope for.

Remember, it is not our job to secure the building. Our job is to secure the business. 

Categories: Uncategorized
  1. Jay
    May 7, 2013 at 7:10 pm

    How will background checks affect everyone in the end.

  2. May 18, 2013 at 12:15 am

    Wow, that’s what I was searching for, what a information! present here at this website, thanks admin of this site.

  3. July 28, 2013 at 5:50 pm

    I started doing work in retail security and I’m currently a security advisor for a number of high profile retail stores. It is definitely satisfying work and when you see the stats on income saved as a result of successful security, you realise why they could pay you so well!

  4. August 3, 2013 at 8:38 pm

    After looking at a handful of the blog posts on your site, I honestly
    like your way of blogging. I saved as a favorite it to my bookmark site list and will be
    checking back soon. Please check out my website as well and let me know how you

  5. August 10, 2013 at 10:52 am

    Very quickly this web page will be famous amid all blogging visitors, due to it’s nice content

  6. Anh
    August 11, 2013 at 12:13 am

    I am regular visitor, how are you everybody? This paragraph posted at this site is really pleasant.

  7. August 13, 2013 at 7:31 am

    Unfortunately, most businesses focus on the “pain point” and not the “pain source” – Great article!

  8. September 26, 2013 at 1:32 pm

    An impressive share! I have just forwarded this onto a co-worker who had been doing
    a little research on this. And he actually ordered me dinner because I found it for him…

    lol. So allow me to reword this…. Thank YOU for the meal!!
    But yeah, thanks for spending the time to discuss this topic here on your web site.

  9. March 24, 2014 at 8:08 am

    Fabulous, what a website it is! This website gives helpful facts to us, keep
    it up.

  10. June 5, 2014 at 7:32 pm

    First of all I would like to say fantastic blog! I had a quick question which I’d like to ask if
    you do not mind. I was curious to know how you
    center yourself and clear your head prior to writing. I’ve had a hard time
    clearing my thoughts in getting my ideas out.
    I truly do take pleasure in writing however it just seems like the first 10 to 15 minutes
    tend to be wasted just trying to figure out how to begin. Any suggestions or hints?

  11. July 12, 2014 at 10:50 am

    This web site truly has all of the info I wanted about this subject and
    didn’t know who to ask.

  12. July 31, 2014 at 11:17 pm

    Wow, superb blog structure! How long have you been running a blog for?

    you made blogging look easy. The entire look of your site is wonderful,
    let alone the content!

  13. August 2, 2014 at 1:29 am

    Currently it seems like Drupal is the best blogging platform available right now.
    (from what I’ve read) Is that what you are using on your blog?

  14. August 4, 2014 at 1:05 am

    Excellent post however I wwas wondering if you could write a litte
    more on this topic? I’d be very thankful if you could elaborate a little bit more.

  15. October 17, 2014 at 12:02 pm

    WOW just what I was looking for. Came here by searching for Breastfeeding

  16. October 17, 2014 at 6:39 pm

    I for all time emailed thhis blog post page to all my contacts, for the reason tha if like to read it after that
    my contacts will too.

  1. August 11, 2013 at 11:14 pm
  2. August 12, 2013 at 12:46 am
  3. August 12, 2013 at 12:50 pm

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s

%d bloggers like this: