The Manager's Handbook

for Corporate Security

Establishing and Managing
a Successful Assets
Protection Program

Dr. Gerald L Kovacich

Edward P. Halibozek

ilU

TTERWORTH
I N E M A N N

An imprint of Elsevier
www.bh.com

Amsterdam Boston London New York Oxford

San Francisco Singapore Sydney Tokyo

Paris

San Diego

Contents
Foreword

xv

Preface

xvii

Acknowledgments

xix

Introduction

xxi

PART I: THE OLD AND NEW WORLD OF THE

SECURITY PROFESSIONAL
It's a New Century and a New World
Introduction to the New World
Summary

1
.

New and Old Threats to Corporate Assets, and

What to Do about Them
Introduction to the World of Threats, Vulnerabilities,
and Risks to Corporate Assets
Threats
The Work Environment Has Changed
Case Study
Motivations of Threat Agents, the Attackers
Vulnerabilities
Risks
Summary
A Short History of Corporate Security and
Law Enforcement
Introduction to the World of Security and Law Enforcement
Definition of Security and Its Environment
Historical Overview of the Origins of Security

3
3
22
25
25
28
30
32
34
36
37
44
47
47
48
49
VII

viii

THE MANAGER'S HANDBOOK FOR CORPORATE SECURITY

A Short History of Law Enforcement and Its Relationship

to Security
The Changing Security and Business Environment
Summary

54
59
60

The Corporate Security Profession

The Need for Corporate Security
Corporate Security Today
The Role of the Corporate Security Professional
The Required Skills of the Security Professional
What Kind of People Are Needed?
Why the Corporate Security Professional?
Where Is Security's Place in the Corporation?
Summary

63
63
67
67
68
69
70
70
71

PART II: THE CORPORATE SECURITY MANAGER

73

The International Widget Corporation (IWC)

Introduction
IWC Background Information
Key Elements for the CSM to Consider
Getting to Know IWC
IWC's Business Plans
IWC CAPP Planning
IWC Departments of Primary Importance to the CSM
IWC Vision, Mission, and Quality Statements
Summary
.

75
75
75
78
78
79
85
85
87
88

The Corporate Security Manager's Role

Introduction to the World of the IWC CSM
CSM Leadership
Management versus Leadership
Customer Expectations
Executive Management Expectations of a CSM
Plans
The SBP's Specific Goals for the CSM
IWC Tactical Business Plan (TBP)
IWC Annual Business Plan (ABP)
CSM Expectations of Executive Management
Working with Executive Management
Working with Corporate Peers
Dealing with Office Politics

91
91
92
93
94
95
97
114
115
116
117
118
119
121

Contents ix

Representing the Corporation to the Community

Dealing with the News Media
Summary

122
124
125

Establishing and Managing a Corporate

Security Department

127

Establishing IWC's Security Department

Duties and Responsibilities
Planning
Staffing a Security Organization
Budgeting
Controlling
Working with Your Managers
Working with Your Employees
Managing Conflict
Dealing with Satellite Offices in the United States
Dealing with Satellite Offices in Foreign Lands
Case Study
Quality, Process Improvement, and Metrics Management:
Assessing Organizational Performance
Summary

127
134
135
136
141
143
146
147
150
151
152
153

PART III: THE CORPORATE SECURITY FUNCTIONS

161
163

Administrative Security
Introduction
Corporate Security Department Projects
The IWC Corporate Assets Protection Plan
Corporate Asset Protection Policies
Procedures
Summary
Physical Security
Definition of Physical Security
Security in Layers
Outer Layers of Protection
Inner Layers
Access Controls
Physical Security Costs
Physical Risk Assessments
Physical Security for Classified Government Contracts
Summary

153
158

163
164
167
171
180
182

185
185
186
187
196
200
205
205
206
206

THE MANAGER'S HANDBOOK FOR CORPORATE SECURITY

10

11

12

13

Outsourced or Proprietary Security?

209

Outsourcing: A Definition
General Information
The Advantages and Disadvantages of a
Proprietary Security Organization
The Advantages and Disadvantages of an
Outsourced Security Organization
Candidate Security Functions for Outsourcing
Sample Outsourcing Analysis
Case Study
Summary
Personnel Security
Introduction
Preemployment and Background Investigations
Sensitive Positions
Conducting Preemployment Background Investigations
Adverse Information
Workplace Violence Prevention
Workplace Violence Case Study
Workplace Violence Prevention Program
Causes of Violent Behavior
Changes in Behavior or Appearance
Crisis Levels and Recommended Actions
What the CSM and Security Managers Can Do to
Prevent Workplace Violence
What Employees Can Do to Prevent Workplace Violence
Workplace Violence Response
A Checklist for the Elements of a Good Personnel
Security Program '
Summary

209
210
210
212
214
216
225
226
227
227
227
234
235
236
236
238
239
240
240
241
242
243
243
244
245

Security Education and Awareness Training

Introduction
Developing a Security Education and Awareness
Training Program (SEATP)
Automation and Online Information Sharing
Summary

247
247

Fire Protection
Introduction to Fire Protection
Fire Prevention and Protection

273
273
274

248
269
271

Contents xi

14

15

16

Vulnerability to Fire
Risks
Fire Prevention and Protection Program
The Elements of IWC's Effective Program
Fire Regulations
Outsourcing Fire Prevention and/or Suppression
Summary

275
276
277
284
285
285

Contingency Planning

287

Introduction
Contingency Planning Program
Emergency Response
Crisis Management
Business Continuity
Summary

287
290
294
299
302
306

Investigations

309

Introduction to IWC's Investigations Organization

Managing the Investigations Organization
Investigations Organization Mission, Vision, and
Quality Statements
Crime Prevention Principles
Crime Prevention Organizational Responsibilities
IWC Investigations Organization Duties and
Responsibilities
The Investigations Organization's Strategic, Tactical,
and Annual Plans,
Crime Prevention Program and Organization
Crime Inquiries and Investigative Functions
Sources, Networking, and Liaison
A Crime OccursShould You Call Law Enforcement?
Summary

309
312

Government Security

337

Introduction
Why Discuss National Security as Part of
Corporate Security?
IWC and Government Agency Contract
National Security Classified Information
Assets Protection Requirements in the National
Security Arena

337

312
313
314
315
316
321
323
327
333
335

339
340
341
342

xii

THE MANAGER'S HANDBOOK FOR CORPORATE SECURITY

Assets Protection Objective in the National

Security Environment
Responsibilities
Collective Assets Protection Controls
The Appointment of the Corporation's
Focal Point for Government Contract Program
Assets Protection
National Industrial Security Program (NISP)
Homeland Security
National Infrastructure Protection Center (NIPC)
IWC Government Contract Award Notification
Summary

17

18

19

343
344
344

344
345
346
346
347
349

Information Security

351

Introduction
Three Basic Categories of Information
Determining the Value of Information
Case StudyA Process for Determining Information Value
The Protection of Automated Information and
High-Technology Equipment
IAPS Organization Responsibilities
LAPS Management Job Description
IAPS Staff Job Descriptions
Information Assurance and Protection Program (IAPP)
Summary

351
354
355
358

Executive Protection

371

An Introduction to Executive Protection

Why Executive Protection?
The Threats and Risks
Know the Protectee
The Protector
Advance Work
Transportation
Home, Office, and Automobile
Mail and Packages
Issues and Concerns
Summary

371
372
373
376
376
378
380
381
382
383
384

Event Security

385

Introduction
Advance WorkPre-Planning

385
386

359
364
365
366
367
369

Contents xiii

20

21

22

23

Security Operations
Physical Security
Information Security
Staff and Executive Protection
Contingencies
Summary

387
388
389
391
391
392

PART IV: THE SECURITY PROFESSION NOW AND

IN THE FUTURE
How to Develop and Maintain a Corporate

393

Security Career Development Program

395

Introduction
The Corporate Security Manager's Career Development
Establishing and Managing a Corporate Security
Career Development Program
Summary
Security ProfessionalsWhat You Can Do to
Help Others
Introduction
Lectures
Writing
Associations
Educational Institutions
Mentoring
Summary

395
397
402
405
407
407
408
411
416
419
419
420

Ethics and the Corporate Security Professional

Introduction
Codes of Ethics
Corporate Ethics, Standards of Conduct,
Business Practices, and Corporate Values
Impact of Ethics on the Corporate Assets
Protection Program
Summary

421
421
424

The Future of the Corporate Security Profession

Introduction
It's a New Century and a New World
Summary

431
431
431
442

About the Authors

445

Index

447

428
429
430