Approaches to Security Implementation
Effective system security is dependent on developing a workplace environment and organizational structure where management comprehends and fully bolsters security efforts, and users are motivated to exercise caution (Sennewald, 2011). As a security manager, I lead this effort. Therefore, in formulating my initial 2 weeks on the job to be an effective manager, I need to begin by nurturing a security-conscious organizational culture. This is where I put emphasis on the need for employees to understand the importance of security and take all the necessary measures as described in the security policy to ensure that the company systems are safe. I will also need to develop tangible processes to support security, and manage the myriad of pieces making up the company’s system. I will make sure that administration and personnel is aware of their security roles, support efforts of security, and are ready to tolerate the minor inconveniences that are unavoidably a part of system change and improvement. After all, if staff circumvent procedures of security (for example, share accounts, disable virus-checking software), they put the whole system at risk. To be an effective team member, I will be ready to listen and support the ideas of my colleagues whenever necessary. I will also make it a habit to communicate with them regularly and in a clear manner. This will serve to ensure that everyone knows what they are supposed to do to achieve the company’s security goals. The critical priorities that I would follow include:
• Ensure employees are well trained to identify and respond to threats-vital to ensure attacks to systems are kept at bay.
• Monitor user activity to assess the implementation of security-vital to ensure security policy is adhered to.
• Communicate the importance of protecting the company’s system-will motivate employees to play an active role in security.
• Password management policies-to ensure employees know and adhere to them as weak passwords are vulnerable to attacks.
• Provide for suitable staff security training-to ensure staff is equipped to deal with security challenges.
Reference
Sennewald, C. A. (2011). Effective security management. Elsevier.
