Nine Practices of the Successful Security Leader

Nine Practices of the Successful Security Leader lays out a series of best practices for security managers. Collected from interviews with security leaders at public and private sector organizations, ranging from small- and mid-size all the way up to large international entities, these practices are a sampling of what is vital and what works. Recommendations such as close communication with management, alignment of security agendas with business goals, and creating internal awareness programs are just some of the effective initiatives detailed in the report. With this information, security professionals can gain insight into the practices of their peers, measure their own success, and mentor junior colleagues.

Nine Practices of the Successful Security Leader is a part of Elsevier’s Security Executive Council Risk Management Portfolio, a collection of real world solutions and "how-to" guidelines that equip executives, practitioners, and educators with proven information for successful security and risk management programs.

• Based on extensive interviews performed by the Security Executive Council with today’s top security leaders
• Summarizes the insights taken from these interviews into nine practical ideas
• Provides actionable advice and strategies for earning the respect and trust of senior management and colleagues

Top-level security managers and executives; mid-level security practitioners and managers who want to develop or enhance their leadership skills; and educators who want experience-based information for shaping the next generation of security professionals

Executive Summary

What is a Research Report?

Introduction

Nine Practices of the Successful Security Leader

1 Create a Robust Internal Awareness Program for the Security Department, Including Formal Marketing and Communication Initiatives

2 Ensure Senior Management Knows What Security is and Does

3 Walk-and-Talk Methodology—Regularly Talk to Senior Business Leaders About Their Issues and How Security Can Contribute

4 Converse in Business Risk Terminology, Not Security Terminology

5 Understand the Corporate Culture and Adapt to It

6 Win Respect by Refusing to Exploit Fear, Uncertainty, and Doubt

7 Base Security Program Goals on the Company’s Business Goals

8 Have Top-Level Support from Day One

9 Portray Security as a Bridging Facilitator or Coordinator Across All Functions

About the Authors

About Elsevier’s Security Executive Council Risk Management Portfolio