Intro To Security MGT
Intro To Security MGT
Intro To Security MGT
Security administration refers to the management and implementation of security measures to protect a
company's assets, including data, information systems, physical infrastructure, and personnel. Threats to these
assets include unauthorized access, theft, damage, and misuse.
The goal of security management procedures is to provide a foundation for an organization's cyber security
strategy. The information and procedures developed as part of security management processes will be used for
data classification, risk management, and threat detection and response.
2. Integrity: Integrity means that information and the IoT devices cannot be modified or
utilized, by unauthorized users and objects.
3. Availability: Availability implies that the computing resources and information should be
available when they are needed by a service. This means that the IoT devices which are
utilized to sense the physical environment, the computing systems that are used to store
and process the information and the communication channels must operate properly.
4. Authenticity: Authenticity assures that the information and transactions are genuine. In
more detail, this principle must validate that the parties that participate in a transaction
must be the ones whom they claim to be.
1. SECURITY MEASURES,
These include protective measures implemented to safeguard information and systems from
unauthorized access, malicious attacks, and potential breaches.
5. ASSET MANAGEMENT
This component involves identifying and managing organizational assets, including hardware, software,
data, and intellectual property. It includes maintaining an inventory of assets, assessing asset
vulnerabilities, and implementing mitigation activities to protect against potential risks. Asset
management ensures the resilience of systems and helps prioritize security efforts based on their
criticality.
1. SECURITY
The term security is derived from the word ‘secure’ which means free from risk, harm, threat, hazards and
danger. It means freedom from fear or anxiety. The term security refers to the safety, protection measures,
detection of criminal activity, protection of human life from danger, offering immunity to assets.
Security is:-
Preventive
“Prevention is better cure” so goes the saying. This concept applies in security management profession.
This is due to the fact that the impact of loss due to human errors, criminal activity or natural
occurrences or technology may become irreparable after occurrence
Detective
Security involves anticipating for criminal activities planning against persons, organizations etc. security
should be commensurate with the anticipated or real threats (validated through undercover investigations)
faced by an organization
Protective
Security is concerned with making harm to property, persons or environment difficult to any threat
Punitive
Security is concerned with increasing opportunity for the apprehension of offenders against humans,
assets, environment or organization.
2. PHYSICAL SECURITY
This refers to any systems or measures put in place to minimize the threats posed by humans or nature, to
offer deterrence, to detect, to make attack or intrusion difficult, to increase opportunities for apprehension
or supplement security forces.
3. ASSETS
This refers to any tangible or intangible that has value. It is any treasured commodity, information, personnel
that if stolen, lost, destroyed or damaged causes harm to an organization.
4. LOSS PREVENTION
This refers to strategies taken by people and organizations to avoid loss of assets due to criminal activity,
embezzlement, fraud, theft or natural causes (earthquakes, storms etc) It is the anticipation and appraisal of
a risk or loss and the initiation of some action to reduce, avoid or do away with the loss. It is
better to prevent a loss from occurrence than to handle it or deal with aspects that result from it e.g. legal
cases.
5. LOSS CONTROL
It is the minimization of loss to assets to an acceptable/predetermined level and the art of dealing
with remaining aspects. It involves the putting measures to minimize losses.
6. RISK
It is the probability of meeting harm, danger or suffering loss to assets (people, property, information, image
or environmental degradation).
7. RISK ASSESSMENT
It is the method of evaluating and precise identification of all probable risks and their potential effects on
human life, property, image and the environment or organization.
8. RISK MANAGEMENT
It is the putting of systems or measures to minimize identified probabilities of meeting danger, suffering loss or
harm to an acceptable level and the proper implementation of measures to deal with the remaining
elements associated with identified risks. It involves five major functions; Risk avoidance: The process of
limiting or eliminating opportunities for loss. It is a complete alteration/cessation of human activities and
functions vulnerable to risk. Risk reduction: This involves putting cheques and balances in place to
decrease the like hood of exposure/reduce opportunities for criminal activities against an
organization/individual/property. Risk spreading: This is division of resources and assets for the purpose of
lowering exposure to loss, harm, and danger. Risk transfers: This involves sharing of the risk of property or
casualties of loss. It can encompass insurance policy/cover for property. Risk retention: This is the conscious
acceptance of the potential losses. The organization or individuals assumes/ignores the possibility of loss.
9. SECURITY MANAGEMENT
It is the art of planning, controlling, organizing and distribution of resources to enhance the safety of
humans, property and environment. It is a public or private service related activity or industry that provides
The spectrum of security practices and procedures is broad with activities designed to eliminate or reduce the full
range of potential hazards (loss, damage, injury).
There are four major security managers functions and roles/responsibilities with varying degrees of emphasis.
These are;
1. Managerial: These are typical to all management functions that involve planning, organizing, employing,
leading, supervising and innovating.
2. Administrative: It involves budget, fiscal supervision, office administration, establishment of security
policies and procedures, development of training programmes for security personnel, provision of
communication and liaison between departments in security related matters, pursuance and fulfillment of
organizational objectives, mission and goals.
3. Preventive: This encompasses inspection and patrols of all area, establishment of restricted areas,
regular audits of performance, control of traffics, security equipment inspection, fire/emergency equipment
inspections and condition checks for alarm systems, lighting systems, fences, doors, windows,
communication equipment, surveillance cameras etc.
4. Investigative: It aims at security clearances, undercover investigations for potential, anticipated or actual
criminal activities, violations of organizational rules, inspections, audits, liaison with public police or fire
agencies, documents examinations and fraud detection.
NB: Security should be a function alongside other traditional functions such as marketing, production,
finance, personnel etc.