Intro To Security MGT

Download as docx, pdf, or txt
Download as docx, pdf, or txt
You are on page 1of 4

What is the meaning of security administration?

Security administration refers to the management and implementation of security measures to protect a
company's assets, including data, information systems, physical infrastructure, and personnel. Threats to these
assets include unauthorized access, theft, damage, and misuse.

What is the responsibility of security management?


The primary role of security managers is to develop and implement effective security strategies and
protocols to protect the company against threats, theft, vandalism and other security risks. This involves
conducting risk assessments, identifying vulnerabilities and devising appropriate security measures.
Purpose of Security Management

The goal of security management procedures is to provide a foundation for an organization's cyber security
strategy. The information and procedures developed as part of security management processes will be used for
data classification, risk management, and threat detection and response.

What are the principle of security administration?


Security has four (4) main principles
,
1. Confidentiality: This term covers two related concepts. First, it signifies that unauthorized
services must not access private information. Secondly, it assures the protection of privacy
and proprietary information..

2. Integrity: Integrity means that information and the IoT devices cannot be modified or
utilized, by unauthorized users and objects.

3. Availability: Availability implies that the computing resources and information should be
available when they are needed by a service. This means that the IoT devices which are
utilized to sense the physical environment, the computing systems that are used to store
and process the information and the communication channels must operate properly.

4. Authenticity: Authenticity assures that the information and transactions are genuine. In
more detail, this principle must validate that the parties that participate in a transaction
must be the ones whom they claim to be.

What is the importance of security administration?


Security management is important because it gives enterprises and organizations a proven, reliable
groundwork for protecting their infrastructure from loss, theft and disruption –

What are the functions of security administration?


Security administration involves the safeguarding of information, personnel, property, assets, and/or
material from theft, loss, misuse, fraud, disclosure, espionage, or sabotage.
What are the components of security administration?
Security management comprises five key components:

1. SECURITY MEASURES,
These include protective measures implemented to safeguard information and systems from
unauthorized access, malicious attacks, and potential breaches.

2. SECURITY POLICIES & PROCEDURES


Security policies outline rules and guidelines for protecting assets. Procedures provide step-by-step
instructions on implementing security measures and responding to security incidents. Well-defined
policies and procedures help establish a security-conscious organizational culture and ensure
consistency in security practices.

3. PHYSICAL & ENVIRONMENTAL PROTECTION


Physical security measures focus on securing physical assets and other critical infrastructure. This
component includes access controls, surveillance systems, and environmental controls (e.g.,
temperature and humidity monitoring) to protect against theft, damage, or disruption caused by natural
disasters or human error.

4. MONITORING PROCESSES & SYAMTEM


Monitoring is crucial for detecting security incidents, unauthorized access attempts, and unusual
activities. It involves the use of intrusion detection systems, log analysis, and other tools to identify and
respond to security breaches promptly. Continuous monitoring helps minimize the risk of security
incidents and enables effective response and forensic analysis.

5. ASSET MANAGEMENT
This component involves identifying and managing organizational assets, including hardware, software,
data, and intellectual property. It includes maintaining an inventory of assets, assessing asset
vulnerabilities, and implementing mitigation activities to protect against potential risks. Asset
management ensures the resilience of systems and helps prioritize security efforts based on their
criticality.

BASIC TERMS IN SECURITY MANAGEMENT

1. SECURITY

The term security is derived from the word ‘secure’ which means free from risk, harm, threat, hazards and
danger. It means freedom from fear or anxiety. The term security refers to the safety, protection measures,
detection of criminal activity, protection of human life from danger, offering immunity to assets.

Security is:-

 Preventive
“Prevention is better cure” so goes the saying. This concept applies in security management profession.
This is due to the fact that the impact of loss due to human errors, criminal activity or natural
occurrences or technology may become irreparable after occurrence

 Detective
Security involves anticipating for criminal activities planning against persons, organizations etc. security
should be commensurate with the anticipated or real threats (validated through undercover investigations)
faced by an organization
 Protective
Security is concerned with making harm to property, persons or environment difficult to any threat

 Punitive
Security is concerned with increasing opportunity for the apprehension of offenders against humans,
assets, environment or organization.

2. PHYSICAL SECURITY

This refers to any systems or measures put in place to minimize the threats posed by humans or nature, to
offer deterrence, to detect, to make attack or intrusion difficult, to increase opportunities for apprehension
or supplement security forces.

3. ASSETS
This refers to any tangible or intangible that has value. It is any treasured commodity, information, personnel
that if stolen, lost, destroyed or damaged causes harm to an organization.

Assets can be divided into:-


a. People: The employees, visitors, clients, suppliers etc.
b. Property: Real estate’s/buildings, raw materials, equipment’s, tools etc.
c. Information: The organization plans, designs, procedures/processes, formulas, trade secrets, patents,
customer list/contacts, marketing plans, stock shares etc.
d. Image: As the saying goes “image is everything”. Corporate image cost time, money in advertisement,
energy. Image refers to customers or prospective customer’s goodwill.

4. LOSS PREVENTION
This refers to strategies taken by people and organizations to avoid loss of assets due to criminal activity,
embezzlement, fraud, theft or natural causes (earthquakes, storms etc) It is the anticipation and appraisal of
a risk or loss and the initiation of some action to reduce, avoid or do away with the loss. It is
better to prevent a loss from occurrence than to handle it or deal with aspects that result from it e.g. legal
cases.

5. LOSS CONTROL
It is the minimization of loss to assets to an acceptable/predetermined level and the art of dealing
with remaining aspects. It involves the putting measures to minimize losses.

6. RISK
It is the probability of meeting harm, danger or suffering loss to assets (people, property, information, image
or environmental degradation).

7. RISK ASSESSMENT
It is the method of evaluating and precise identification of all probable risks and their potential effects on
human life, property, image and the environment or organization.

8. RISK MANAGEMENT
It is the putting of systems or measures to minimize identified probabilities of meeting danger, suffering loss or
harm to an acceptable level and the proper implementation of measures to deal with the remaining
elements associated with identified risks. It involves five major functions;  Risk avoidance: The process of
limiting or eliminating opportunities for loss. It is a complete alteration/cessation of human activities and
functions vulnerable to risk.  Risk reduction: This involves putting cheques and balances in place to
decrease the like hood of exposure/reduce opportunities for criminal activities against an
organization/individual/property.  Risk spreading: This is division of resources and assets for the purpose of
lowering exposure to loss, harm, and danger.  Risk transfers: This involves sharing of the risk of property or
casualties of loss. It can encompass insurance policy/cover for property.  Risk retention: This is the conscious
acceptance of the potential losses. The organization or individuals assumes/ignores the possibility of loss.

9. SECURITY MANAGEMENT
It is the art of planning, controlling, organizing and distribution of resources to enhance the safety of
humans, property and environment. It is a public or private service related activity or industry that provides

SECURITY FUNCTIONS AND RESPONSIBILITY OF THE MANAGER


INTRODUCTION
The spectrum of security practices and procedures is broad. The responsibilities and functions of a security
manger undefined and misunderstood. This sector explains the responsibilities of a security manager. It examines
how security is structured and the advantages of each structure. It justifies the need for security functions be
equal to other organizational functions.

The spectrum of security practices and procedures is broad with activities designed to eliminate or reduce the full
range of potential hazards (loss, damage, injury).

The activities are:

 Protection of life and property


 Building and perimeter protection by means of barriers, fences, walls and gates: protective lighting, security
guards, surveillance cameras etc.
 Intrusion and access control: By means of doors and window security, locks and keys, security
containers (files, sages and vaults) package monitoring, parking security, vehicle inspections, guards posting
and patrol.
 Alarm and surveillance system: By means CCTVs, vibration detectors, sound detectors etc.
 Fire prevention and control- Extinguishing systems, fire response programmers, evacuation procedures and fire
alarm systems.
 Emergency and disaster planning
 Protection of intellectual property/data
 Prevention of theft and pilferage: By personnel screening, pre-employment/background investigations or
screening, procedural control, polygraph and PSE (Psychological Stress Evaluator) investigations.
 Enforcement of crime or loss related rules and policies.

RESPONSIBILITIES OF SECURITY MANAGER

There are four major security managers functions and roles/responsibilities with varying degrees of emphasis.
These are;
1. Managerial: These are typical to all management functions that involve planning, organizing, employing,
leading, supervising and innovating.
2. Administrative: It involves budget, fiscal supervision, office administration, establishment of security
policies and procedures, development of training programmes for security personnel, provision of
communication and liaison between departments in security related matters, pursuance and fulfillment of
organizational objectives, mission and goals.
3. Preventive: This encompasses inspection and patrols of all area, establishment of restricted areas,
regular audits of performance, control of traffics, security equipment inspection, fire/emergency equipment
inspections and condition checks for alarm systems, lighting systems, fences, doors, windows,
communication equipment, surveillance cameras etc.
4. Investigative: It aims at security clearances, undercover investigations for potential, anticipated or actual
criminal activities, violations of organizational rules, inspections, audits, liaison with public police or fire
agencies, documents examinations and fraud detection.

NB: Security should be a function alongside other traditional functions such as marketing, production,
finance, personnel etc.

You might also like