Discovering the Total Cost of Security to the Enterprise : Proven Practices.

5 Pages·2014·0.428 MB·English

by  Lefler, Richard

Discovering the Total Cost of Security
to the Enterprise
Discovering the Total Cost of
Security to the Enterprise
Proven Practices
Richard Lefler
AMSTERDAM(cid:129)BOSTON(cid:129)HEIDELBERG(cid:129)LONDON
NEWYORK(cid:129)OXFORD(cid:129)PARIS(cid:129)SANDIEGO
SANFRANCISCO(cid:129)SINGAPORE(cid:129)SYDNEY(cid:129)TOKYO
Elsevier
Radarweg29,POBox211,1000AEAmsterdam,Netherlands
TheBoulevard,LangfordLane,Kidlington,OxfordOX51GB,UK
225WymanStreet,Waltham,MA02451,USA
Copyrightr2015TheSecurityExecutiveCouncil.PublishedbyElsevierInc.Allrightsreserved.
Nopartofthispublicationmaybereproducedortransmittedinanyformorbyanymeans,
electronicormechanical,includingphotocopying,recording,oranyinformationstorageand
retrievalsystem,withoutpermissioninwritingfromthepublisher.Detailsonhowtoseek
permission,furtherinformationaboutthePublisher’spermissionspoliciesandourarrangements
withorganizationssuchastheCopyrightClearanceCenterandtheCopyrightLicensingAgency,
canbefoundatourwebsite:www.elsevier.com/permissions.
Thisbookandtheindividualcontributionscontainedinitareprotectedundercopyrightbythe
Publisher(otherthanasmaybenotedherein).
Notices
Knowledgeandbestpracticeinthisfieldareconstantlychanging.Asnewresearchand
experiencebroadenourunderstanding,changesinresearchmethods,professionalpractices,or
medicaltreatmentmaybecomenecessary.
Practitionersandresearchersmustalwaysrelyontheirownexperienceandknowledgein
evaluatingandusinganyinformation,methods,compounds,orexperimentsdescribedherein.In
usingsuchinformationormethodstheyshouldbemindfuloftheirownsafetyandthesafetyof
others,includingpartiesforwhomtheyhaveaprofessionalresponsibility.
Tothefullestextentofthelaw,neitherthePublishernortheauthors,contributors,oreditors,
assumeanyliabilityforanyinjuryand/ordamagetopersonsorpropertyasamatterofproducts
liability,negligenceorotherwise,orfromanyuseoroperationofanymethods,products,
instructions,orideascontainedinthematerialherein.
LibraryofCongressCataloging-in-PublicationData
AcatalogrecordforthisbookisavailablefromtheLibraryofCongress.
BritishLibraryCataloguing-in-PublicationData
AcataloguerecordforthisbookisavailablefromtheBritishLibrary.
ISBN:978-0-12-802080-7
FormorepublicationsintheElsevierRiskManagementandSecurityCollection,
visitourwebsiteatstore.elsevier.com/SecurityExecutiveCouncil.
EXECUTIVE SUMMARY
In Discovering the Total Cost of Security to the Enterprise, presenter
Richard Lefler discusses what security actually costs an organization
in terms of operating, variable, and mandatory costs.
Each of the three types of security costs are defined and expanded
upon in this presentation. Lefler also explains how certain industry
sectors have increasing variable and operating costs, along with the
reasons behind these trends. The presentation also covers mandatory
spend versus discretionary spend, chief security officer management
(CSO) trends, and the critical next steps for CSOs.
Richard Lefler is the former vice president for worldwide security
of American Express. In addition to his security duties, Lefler
managed the Corporate Aviation Unit. He currently serves on the
Executive Board of Advisors and as the dean of Emeritus Faculty for
the Security Executive Council.
WHAT ARE PROVEN PRACTICES?
Proven practices are visual PowerPoint presentations with audio
narration that provide proven concepts and practices for security and
business professionals seeking new and creative ways to understand
and shape security. Proven practices have been created by experienced
practitioners of leading organizations and describe concepts or
practices that have been successfully implemented and are proven to
work. They provide a framework that can be quickly customized and
incorporated to meet the specific needs of an organization and its
culture. Practitioners use proven practices to learn about applications,
provide staff training, or create organizational awareness. Educators
enhance current curriculums by adding real-world insight and work-
place context from relevant practitioners who have held positions
similar to those students are preparing for. Proven practices can be
utilized to enhance course offerings as a “guest lecture” option.
Discovering the Total Cost of Security
to the Enterprise
A PROVEN PRACTICES PRESENTATION
http://dx.doi.org/10.1016/B978-0-12-802080-7.00001-9