Aligning Security Services with

Business Objectives

Aligning Security Services with

Business Objectives
Proven Practices
Richard Lefler

AMSTERDAM BOSTON HEIDELBERG LONDON

NEW YORK OXFORD PARIS SAN DIEGO
SAN FRANCISCO SINGAPORE SYDNEY TOKYO

Elsevier
The Boulevard, Langford Lane, Kidlington, Oxford, OX5 1GB, UK
225 Wyman Street, Waltham, MA 02451, USA
First published 2013
Copyright r 2013 The Security Executive Council. Published by Elsevier Inc. All rights reserved.
No part of this publication may be reproduced or transmitted in any form or by any means,
electronic or mechanical, including photocopying, recording, or any information storage and
retrieval system, without permission in writing from the publisher. Details on how to seek
permission, further information about the Publishers permissions policies and our arrangement
with organizations such as the Copyright Clearance Center and the Copyright Licensing Agency,
can be found at our website: www.elsevier.com/permissions
This book and the individual contributions contained in it are protected under copyright
by the Publisher (other than as may be noted herein).
Notices
Knowledge and best practice in this field are constantly changing. As new research and
experience broaden our understanding, changes in research methods, professional practices,
or medical treatment may become necessary.
Practitioners and researchers must always rely on their own experience and knowledge
in evaluating and using any information, methods, compounds, or experiments described herein.
In using such information or methods they should be mindful of their own safety and the safety
of others, including parties for whom they have a professional responsibility.
To the fullest extent of the law, neither the Publisher nor the authors, contributors, or
editors, assume any liability for any injury and/or damage to persons or property as a matter
of products liability, negligence or otherwise, or from any use or operation of any methods,
products, instructions, or ideas contained in the material herein.
British Library Cataloguing in Publication Data
A catalogue record for this book is available from the British Library
Library of Congress Cataloging-in-Publication Data
A catalog record for this book is available from the Library of Congress
ISBN: 978-0-12-417008-7
For more publications in the Elsevier Risk Management and Security Collection,
visit our website at store.elsevier.com/SecurityExecutiveCouncil.

EXECUTIVE SUMMARY

Often, security must demonstrate the value of an absence of problems

to business leaders. In Aligning Security Services with Business
Objectives, presenter Richard Lefler discusses the ways security practitioners and executives can convey this information using security measures and metrics. He also addresses how to develop and manage
security programs that enhance profitability and the companys ability
to reduce shrinkage and loss.
This 42-minute proven practices presentation begins with an explanation of the total cost of security, broken down by fixed and variable
costs. Lefler then expands on specific examples of costs that contribute
to the total cost of security, including ongoing losses, one-time events,
employee misconduct, insurance, facilities protection, employee protection, compliance, information protection, and more. An example metric that will help illustrate each cost items importance to the overall
business is also provided.
Lefler retired in 2001 as vice president for worldwide security at
American Express, where he was responsible for program development
and management of employee security, facility protection, investigation of attacks on financial products, and coordination with federal,
state, and international law enforcement agencies regarding security
concerns.

WHAT ARE PROVEN PRACTICES?

Proven practices are visual PowerPoint presentations with audio narration that provide proven concepts and practices for security and business professionals seeking new and creative ways to understand and
shape security. Proven practices have been created by experienced
practitioners of leading organizations and describe concepts or practices that have been successfully implemented and are proven to work.
They provide a framework that can be quickly customized and incorporated to meet the specific needs of an organization and its culture.
Practitioners use proven practices to learn about applications, provide

viii

Executive Summary

staff training, or create organizational awareness. Educators enhance

current curriculums by adding real-world insight and workplace context from relevant practitioners who have held positions similar to
those students are preparing for. Proven practices can be utilized to
enhance course offerings as a guest lecture option.

Aligning Security Services with

Business Objectives
A PROVEN PRACTICES PRESENTATION

doi:http://dx.doi.org/10.1016/B978-0-12-417008-7.00001-5