In Depth

How to Build a Security Management Team

By Anonymous

September 12, 2007CSO

For many years, as I grew in the executive ranks of several companies, I heard that it was lonely at the top. Once you achieved the highest position in your department, people said, you were the leader responsible for all the make-or-break decisions and their consequences. At the same time, those people said, there was a need to tip your balance of responsibilities to a more strategic role, so that you could spend less time and energy being tactical.

This creates a taxing dilemma: How do you make all the decisions while still becoming more strategic? Spend more time on the job? Maybe. Some might say that’s why we CSOs get paid the big bucks.

Having found myself in that situation, however, I’ve been working on another approach: improving my team’s dynamics so that I can comfortably delegate more decisions, thus freeing myself up to focus on strategy. After all, being responsible for each and every decision is different from actually making each and every decision.

There’s an added bonus too. Especially for CSOs who manage a team of executives who oversee security in various and divergent functions of a major organization—for example, a leader who oversees both the IT security and physical security functions, or who directs physical security across diverse business channels—this approach can be rewarding not only for you but also for the rest of your team, because it allows them to participate in the decision-making process across a broad scope of the business.

Of course, it’s not easy building trust with the group and divorcing yourself from the day-to-day operations of the business. But after a solid year of working toward empowering my team, I’m finding that it’s starting to pay off. Here’s what I’ve learned so far.

Building the Team

The first task at hand is assembling a team, typically your direct reports or all management at a certain level. For example, my team consists of my direct reports (four) and all other director-level members of my department (four). For our purposes here, I’ll refer to this team as the Security Executive Team, or SET. As leaders, perhaps our most important focus is making sure that our top managers have a strong balance of hard and soft skills and are capable of decision making, communication and program execution without our direct intervention.

It is important that you establish the SET with a couple of critical points in mind. First, the SET must be responsible for setting the direction of the department and making all key decisions that affect any aspect of the department’s business—regardless of how divergent the organization that you support.

RESOURCE CENTER
Loading...
VIRTUAL CONFERENCE
Data Center Directions Virtual Conference

Data Center VCAttend this free, 100% online event exploring tools and techniques for making your data center deliver for today and tomorrow.

» Learn more and register here

WHITE PAPER
Maximizing Site Visitor Trust Using Extended Validation SSL

VeriSignNow with Extended Validation (EV) SSL available from VeriSign, you can show your customers that they can trust your site. Learn about EV SSL benefits in the free VeriSign white paper.

» Read the Paper

Featured Sponsors
Sponsored Links

Manage your IT more effectively

Secure your virtual and physical environments with the same software

Simplify your data center with Juniper Networks. View the webcast

E-LOAN Maintains Reputation as a Privacy Leader with Symantec

Data Loss Prevention: Keeping Sensitive Data Out of the Wrong Hands

Prudential Financial Protects its Brand with Symantec

Envision Identity-Based Access Control for the Datacenter

Digital Identity Protection and Data Security Get Personal

Welcome to the age of Service-Oriented Security (SOS)

When Customer Relationship is Everything, Businesses Bank on SSL Solutions

Everything Today's CISO Needs to Know About Using SSO to Succeed in the Web 2.0 Era

The Case for Business Software Assurance ~ Securing Your Applications

Maximizing Site Visitor Trust Using Extended Validation SSL

Solving Online Credit Fraud Using Device Reputation

Understanding Data Location is Imperative for Data Loss Prevention

5 Steps to Secure Outsourced Application Development

CA's IT Security centralizes your identity management to turn security into a proactive, business-building tool

Efficient - Flexible - Compliant

Any company can promise identity protection. Only Debix can prove it

7 Requirements of Data Loss Prevention

Information Security: Data Drains and How to Prevent Loss

How Are Open Source Development Communities Embracing Security Best Practices?

IDC Defines an Identity and Access Management Submarket

Using Likewise to Comply with PCI Data Security Standard

IDC Defines an Identity and Access Management Submarket for Managing Privileged User Accounts and Meeting GRC Requirements

Enabling Compliance with Converged Mainframe Security and Storage

Managing SSL Security in Multi-Server Environments

The Latest Advancements in SSL Technology

How to Offer the Strongest SSL Encryption

Forrester Total Economic Impact (TEI) report: Save Millions in Fraud Losses.

Get in Compliance With Government Data Regulations

Taking the Botnet Threat Seriously