Security Process Optimization: Do You Qualify?
Posted on Tue, Nov 16, 2010
ASG defines Security Process Optimization as a way to manage the roles, relationships, processes and systems that are unique to directing and controlling outcomes within security in order to achieve the organization’s goals, cut costs, drive performance and increase the organization’s value.
ASG follows three important steps when conducting SPO:
Security Systems and Process Assessment
• Technology Assessment to identify the current technology and system architecture
• Process Assessment to identify security’s core processes and the people who manage, support and benefit from it
• Executive Assessment to define the strategic importance of security to the organization through its risk and opportunity assessment
Process Improvement
• Once ASG knows what your current situation looks like the next phase is to determine and measure immediate performance improvements as well as improve security’s value over time
Security Planning
• Create an architecture to guide the design, acquisition and deployment of technology
• Identify the processes, roles and tools needed for continuous improvement
• Determine the key performance metrics that will guide the budget, resources and technology
• Plan the roadmap for the future to provide optimum performance
Here are five elements ASG qualifies before conducting SPO:
1. Does your organization’s Senior Executive Team have a track record of goal setting and measurement?
2. Do they align budgets with performance?
3. Do the executives who own security want an honest baseline assessment of how their processes, systems, and people work holistically to deliver outcomes important to the goals of their organization so that they can point to their performance over time?
4. Are you prepared to develop a plan to implement strategic options that are critical to your success?
5. Once a baseline assessment is delivered, are you prepared to take steps to continuously measure your performance over time?
For more information, you can download any of the content we have provided on our website including:
You may have questions about any or all of these. If so, we welcome your questions through this blog or by contacting us directly.