Toolbox for the New Security Executive Minneapolis MN

Bob Hayes and I go back almost 20 years. When I was cutting my teeth as an editor and associate publisher in those early days, Bob—first as chief security executive at 3M and then CSO for Georgia-Pacific—was my lifeline of sorts. I found it fascinating to listen to him expound upon the relevance and importance of issues that most of us didn't consider part of the security function, issues like business alignment, regulatory landmines and liability pitfalls.

You've got to remember, back in the 1980s, security was all about the low profile. Don't draw attention to your job or your role in the company, and they might just leave you alone. Every security department struggled to justify its existence to the executive boardroom, and security directors worried through many a sleepless night.

Fast forward to 2007. Today we can see that the average security department has developed a greater understanding of threats and business risk and plays a bigger role in those functions. Now a nervous truce seems to be in place between security and the boardroom. Yet the career path that brings most security directors into management positions, both corporate and IT, still leaves a surprising number unable to cost justify their departments or to position themselves in the enterprise model. Very few CSOs have been able to develop reliable business metrics that not only cover their rear, but that help them develop strategic revenue centers for security. That is troubling for Mr. Hayes.

When Bob became chief security officer for IDG's CXO Media, the publisher of CSO magazine, in 2004, he was setting out on a road that would finally give him a platform for change. In 2005 CXO made Bob the executive director of the newly launched Security Executive Council (www.csoexecutivecouncil.com), a professional organization for C-level security management with a mandate to advance strategic security practices. This project has evolved into an information goldmine for security practitioners, so when Bob approached ST&D and SIW to partner with the council on some strategic initiatives, we couldn't resist. During planning meetings these last several months, we have been incredibly impressed by the scope and overwhelming quality of information available.

This partnership with the Security Executive Council is an exciting development for me personally as well. During the past three years at our SecureWorld Convergence Seminar events, which have attracted more than 12,000 top-level security executives, I have seen a migration of security function and reporting that has redefined the role of both physical and IT security directors. Organizations now demand that their security leaders align themselves with the business goals for mitigating risk, assessing threats, analyzing costs and measuring compliance. Giving you the tools and expertise to do all that and more will be our collaborative goal in 2007.

Beginning with our March issue, ST&D will be providing you a full toolbox of invaluable, exclusive columns and feature articles in the areas of security careers, security metrics and regulatory compliance. Through these resources we will work to help corporate, IT, risk and facility directors not only survive their jobs, but excel at them.

We look forward to bringing you these new tools in print and online. Our goal is to make this a constructive and interactive experience, so we are asking for your feedback and help in benchmarking many of the issues we will be presenting you in 2007.