In Depth

Global Security: Security Opens Borders

A world of risk is also a world of economic opportunities. The challenge for CSOs is to help their companies balance the two.

By Derek Slater

September 30, 2004CSO — Overseas markets are tempting because that's where the fastest growth is. But global business is tricky business. Take, for example, the dilemma of the CSO of a Fortune 500 food-industry company, who says, "There are countries where being aggressive [about branding] might draw unwanted attention. We've taken down our logo from a number of facilities overseas, and I know many of my peers have done the same at their companies."

To reap the rewards of those high-growth markets, your company must get security right. In that light, the CSO is a crucial player in crossing the borders to worldwide economic opportunity. But when you talk to your CEO about taking down the company's logos, he won't feel like you're throwing open the door to prosperity. Therefore, it's not a decision to be taken lightly, nor one that invites a one-size-fits-all edict from corporate headquarters. In which specific countries does the risk created by putting your logo on a corporate warehouse outweigh the benefits?

That, in the proverbial nutshell, is the challenge of the Global CSO. From country to country, you'll find different risks, different regulatory requirements, different cultural expectations. CSOs need to understand those things in great detail and know which mitigation strategies are allowable and desirable in each local context to combat each specific kind of threat. Getting it all right is going to require a witch's brew of business knowledge, security experience, local information sources, metrics and intuition. But perhaps most of all, it will require discussion. Lots and lots of discussion. "We give advice every single day where it's like: 'If you do this, it will probably save the company money,'" says the food-industry CSO. "What I'm finding is, with our number of countries and facilities, we have to hold case-by-case discussions. It's very difficult to create blanket [worldwide] security policies. So we've published guidelines and best practices, and how our business units choose to implement those things is up to them.

"We give them the best information we can, and they take it and knit it into their environment."

This special issue of CSO delves into broad themes of securing global commerceprinciples for limiting loss in the supply chain, how law enforcement agencies around the world are forging cooperative structures, and how to educate executives and other employees to minimize the dangers of travel to risky locales. But it also details the specific threats and challenges of various countries. We hope these stories will contribute to the discussions that are sure to continue at your own business, as you seek to build profitable and safe worldwide operations.

RESOURCE CENTER
Loading...
VIRTUAL CONFERENCE
Data Center Directions Virtual Conference

Data Center VCAttend this free, 100% online event exploring tools and techniques for making your data center deliver for today and tomorrow.

» Learn more and register here

WEBCAST
The Surest Path to Effective and Efficient Compliance

VeriSignIn this webcast, we explore why and how — with best practices, practical tips and solutions that work — to ease your compliance challenge.

» View the webcast

Featured Sponsors
Sponsored Links

Think your data is safe? Think again. It's time to Outthink the Threat. Get eBook now

Configuration Audit and Control for Virtualized Environments

Enabling Compliance with Converged Mainframe Security and Storage

Diebold: Frost & Sullivan Global Physical Security Systems Integrator of the Year

Ponemon Study: How Much Does a Data Breach "Cost"?

Data Protection: Challenges for the Traveling User

Key strategies for C-level executives and security staff

Configuration Assessment: Choosing the Right Solution

The PCI Data Security Standard

Configuration Audit and Control for Virtualized Environments

7 Requirements of Data Loss Prevention

Information Security: Data Drains and How to Prevent Loss

How Are Open Source Development Communities Embracing Security Best Practices?

IDC Defines an Identity and Access Management Submarket

Using Likewise to Comply with PCI Data Security Standard

IDC Defines an Identity and Access Management Submarket for Managing Privileged User Accounts and Meeting GRC Requirements

The Case for Business Software Assurance ~ Securing Your Applications

Forrester Total Economic Impact (TEI) report: Save Millions in Fraud Losses.

Learn how the new Quad-Core AMD Opteron™ processor improves performance

Rolling the dice with your security? Take the Self-Assessment Test now

Take our CSO role survey and receive a copy of the results

Prepare for (ISC)2® Certification With Villanova - Online

Revolutionizing Endpoint Security with a Single Agent

Envision Identity-Based Access Control for the Datacenter

IT Service Management: Metrics That Matter

ITCi White Paper: Challenges and Opportunities of PCI

Effective Security with a Continuous Approach to ISO 27001 Compliance

E-LOAN Maintains Reputation as a Privacy Leader with Symantec

Data Loss Prevention: Keeping Sensitive Data Out of the Wrong Hands

Prudential Financial Protects its Brand with Symantec

Envision Identity-Based Access Control for the Datacenter

Digital Identity Protection and Data Security Get Personal

Welcome to the age of Service-Oriented Security (SOS)

Everything Today's CISO Needs to Know About Using SSO to Succeed in the Web 2.0 Era

Solving Online Credit Fraud Using Device Reputation