Today's leading security executives are no longer just "selling the security program" to executive management. They are also collaborating with senior executives about enterprise security risk. Here is why:

• Business assets are the property of the business owners, who have delegated the care and protection of those assets to the executive management team.
  
  
• Risks to business assets—and risk decisions—are the responsibility of executive management.
  
  
• Because executive management must make the risk decisions, security executives must provide security risk information and recommendations to executive management so that they can make informed risk decisions.
  
  
• The organization's ownership, executive management, and senior security executive are all stakeholders in corporate security, each with their own rights and responsibilities.

These rights and responsibilities are captured in these three Security Bill of Rights documents (click to read them in a new window):

• A Security Bill of Rights for Ownership
• Senior Management's Security Bill of Rights and Responsibilities
• Security Executive's Bill of Rights and Responsibilities

Whether the senior security executive is the CSO, the VP of Security, or several executives who divide responsibilities for corporate, physical and information systems betwen them, the Security Executive's Bill of Rights and Responsibilities still applies.

Do you insist on your corporate security rights?

Do you take full ownership of all your corporate security responsibilities?

You should also insist that the other security stakeholders do the same.

Best regards,
Ray Bernard

2006 by Ray Bernard. All Rights Reserved. Permission is granted to reprint with The Security Minute identified as the source and Ray Bernard as the author.