The Manager's Handbook
for Corporate Security
Establishing and Managing
a Successful Assets
Protection Program
Dr. Gerald L Kovacich
Edward P. Halibozek
ilU
TTERWORTH
I N E M A N N
An imprint of Elsevier
www.bh.com
Amsterdam Boston London New York Oxford
San Francisco Singapore Sydney Tokyo
Paris
San Diego
Contents
Foreword
xv
Preface
xvii
Acknowledgments
xix
Introduction
xxi
PART I: THE OLD AND NEW WORLD OF THE
SECURITY PROFESSIONAL
It's a New Century and a New World
Introduction to the New World
Summary
1
.
New and Old Threats to Corporate Assets, and
What to Do about Them
Introduction to the World of Threats, Vulnerabilities,
and Risks to Corporate Assets
Threats
The Work Environment Has Changed
Case Study
Motivations of Threat Agents, the Attackers
Vulnerabilities
Risks
Summary
A Short History of Corporate Security and
Law Enforcement
Introduction to the World of Security and Law Enforcement
Definition of Security and Its Environment
Historical Overview of the Origins of Security
3
3
22
25
25
28
30
32
34
36
37
44
47
47
48
49
VII
viii
THE MANAGER'S HANDBOOK FOR CORPORATE SECURITY
A Short History of Law Enforcement and Its Relationship
to Security
The Changing Security and Business Environment
Summary
54
59
60
The Corporate Security Profession
The Need for Corporate Security
Corporate Security Today
The Role of the Corporate Security Professional
The Required Skills of the Security Professional
What Kind of People Are Needed?
Why the Corporate Security Professional?
Where Is Security's Place in the Corporation?
Summary
63
63
67
67
68
69
70
70
71
PART II: THE CORPORATE SECURITY MANAGER
73
The International Widget Corporation (IWC)
Introduction
IWC Background Information
Key Elements for the CSM to Consider
Getting to Know IWC
IWC's Business Plans
IWC CAPP Planning
IWC Departments of Primary Importance to the CSM
IWC Vision, Mission, and Quality Statements
Summary
.
75
75
75
78
78
79
85
85
87
88
The Corporate Security Manager's Role
Introduction to the World of the IWC CSM
CSM Leadership
Management versus Leadership
Customer Expectations
Executive Management Expectations of a CSM
Plans
The SBP's Specific Goals for the CSM
IWC Tactical Business Plan (TBP)
IWC Annual Business Plan (ABP)
CSM Expectations of Executive Management
Working with Executive Management
Working with Corporate Peers
Dealing with Office Politics
91
91
92
93
94
95
97
114
115
116
117
118
119
121
Contents ix
Representing the Corporation to the Community
Dealing with the News Media
Summary
122
124
125
Establishing and Managing a Corporate
Security Department
127
Establishing IWC's Security Department
Duties and Responsibilities
Planning
Staffing a Security Organization
Budgeting
Controlling
Working with Your Managers
Working with Your Employees
Managing Conflict
Dealing with Satellite Offices in the United States
Dealing with Satellite Offices in Foreign Lands
Case Study
Quality, Process Improvement, and Metrics Management:
Assessing Organizational Performance
Summary
127
134
135
136
141
143
146
147
150
151
152
153
PART III: THE CORPORATE SECURITY FUNCTIONS
161
163
Administrative Security
Introduction
Corporate Security Department Projects
The IWC Corporate Assets Protection Plan
Corporate Asset Protection Policies
Procedures
Summary
Physical Security
Definition of Physical Security
Security in Layers
Outer Layers of Protection
Inner Layers
Access Controls
Physical Security Costs
Physical Risk Assessments
Physical Security for Classified Government Contracts
Summary
153
158
163
164
167
171
180
182
185
185
186
187
196
200
205
205
206
206
THE MANAGER'S HANDBOOK FOR CORPORATE SECURITY
10
11
12
13
Outsourced or Proprietary Security?
209
Outsourcing: A Definition
General Information
The Advantages and Disadvantages of a
Proprietary Security Organization
The Advantages and Disadvantages of an
Outsourced Security Organization
Candidate Security Functions for Outsourcing
Sample Outsourcing Analysis
Case Study
Summary
Personnel Security
Introduction
Preemployment and Background Investigations
Sensitive Positions
Conducting Preemployment Background Investigations
Adverse Information
Workplace Violence Prevention
Workplace Violence Case Study
Workplace Violence Prevention Program
Causes of Violent Behavior
Changes in Behavior or Appearance
Crisis Levels and Recommended Actions
What the CSM and Security Managers Can Do to
Prevent Workplace Violence
What Employees Can Do to Prevent Workplace Violence
Workplace Violence Response
A Checklist for the Elements of a Good Personnel
Security Program '
Summary
209
210
210
212
214
216
225
226
227
227
227
234
235
236
236
238
239
240
240
241
242
243
243
244
245
Security Education and Awareness Training
Introduction
Developing a Security Education and Awareness
Training Program (SEATP)
Automation and Online Information Sharing
Summary
247
247
Fire Protection
Introduction to Fire Protection
Fire Prevention and Protection
273
273
274
248
269
271
Contents xi
14
15
16
Vulnerability to Fire
Risks
Fire Prevention and Protection Program
The Elements of IWC's Effective Program
Fire Regulations
Outsourcing Fire Prevention and/or Suppression
Summary
275
276
277
284
285
285
Contingency Planning
287
Introduction
Contingency Planning Program
Emergency Response
Crisis Management
Business Continuity
Summary
287
290
294
299
302
306
Investigations
309
Introduction to IWC's Investigations Organization
Managing the Investigations Organization
Investigations Organization Mission, Vision, and
Quality Statements
Crime Prevention Principles
Crime Prevention Organizational Responsibilities
IWC Investigations Organization Duties and
Responsibilities
The Investigations Organization's Strategic, Tactical,
and Annual Plans,
Crime Prevention Program and Organization
Crime Inquiries and Investigative Functions
Sources, Networking, and Liaison
A Crime OccursShould You Call Law Enforcement?
Summary
309
312
Government Security
337
Introduction
Why Discuss National Security as Part of
Corporate Security?
IWC and Government Agency Contract
National Security Classified Information
Assets Protection Requirements in the National
Security Arena
337
312
313
314
315
316
321
323
327
333
335
339
340
341
342
xii
THE MANAGER'S HANDBOOK FOR CORPORATE SECURITY
Assets Protection Objective in the National
Security Environment
Responsibilities
Collective Assets Protection Controls
The Appointment of the Corporation's
Focal Point for Government Contract Program
Assets Protection
National Industrial Security Program (NISP)
Homeland Security
National Infrastructure Protection Center (NIPC)
IWC Government Contract Award Notification
Summary
17
18
19
343
344
344
344
345
346
346
347
349
Information Security
351
Introduction
Three Basic Categories of Information
Determining the Value of Information
Case StudyA Process for Determining Information Value
The Protection of Automated Information and
High-Technology Equipment
IAPS Organization Responsibilities
LAPS Management Job Description
IAPS Staff Job Descriptions
Information Assurance and Protection Program (IAPP)
Summary
351
354
355
358
Executive Protection
371
An Introduction to Executive Protection
Why Executive Protection?
The Threats and Risks
Know the Protectee
The Protector
Advance Work
Transportation
Home, Office, and Automobile
Mail and Packages
Issues and Concerns
Summary
371
372
373
376
376
378
380
381
382
383
384
Event Security
385
Introduction
Advance WorkPre-Planning
385
386
359
364
365
366
367
369
Contents xiii
20
21
22
23
Security Operations
Physical Security
Information Security
Staff and Executive Protection
Contingencies
Summary
387
388
389
391
391
392
PART IV: THE SECURITY PROFESSION NOW AND
IN THE FUTURE
How to Develop and Maintain a Corporate
393
Security Career Development Program
395
Introduction
The Corporate Security Manager's Career Development
Establishing and Managing a Corporate Security
Career Development Program
Summary
Security ProfessionalsWhat You Can Do to
Help Others
Introduction
Lectures
Writing
Associations
Educational Institutions
Mentoring
Summary
395
397
402
405
407
407
408
411
416
419
419
420
Ethics and the Corporate Security Professional
Introduction
Codes of Ethics
Corporate Ethics, Standards of Conduct,
Business Practices, and Corporate Values
Impact of Ethics on the Corporate Assets
Protection Program
Summary
421
421
424
The Future of the Corporate Security Profession
Introduction
It's a New Century and a New World
Summary
431
431
431
442
About the Authors
445
Index
447
428
429
430
