Relationships and Allies

An assessment of your internal organizational relationships and allies includes an examination of Security’s role in corporate functions and its relationship to other business functions. There are two parts to this assessment. The first part addresses factors that are involved in cross-functional relationships.

Relationship to Other Business Functions

1. Are Senior security personnel included in the corporate strategic planning process?
   
   

   __ Always

   __ Usually

   __ Sometimes

   __ Rarely

   __ Never

 

2. Does Security have its own mission statement?
   
   

   __ Always

   __ Yes

   __ No

   If Yes, is the mission statement up to date and in alignment with other corporate and divisional mission statements?

   Corporate: __ Yes  __ No

   Division:      __ Yes  __ No (answer separately for each division Security supports or services)

 

3. Does Security have its own strategic plan?
   
   

   __ Yes

   __ No

   If Yes, is the strategic plan up to date and in alignment with other corporate and divisional strategic plans?

   Corporate: __ Yes  __ No

   Division:      __ Yes  __ No (answer separately for each division Security supports or services)

 

4. Are cross-functional councils, groups or committees involved in setting the priorities for major security risk mitigation actions?
   
   

   Check all that apply.

   __ Always

   __ At Security’s Request

   __ At Management’s Request

   __ At Business Unit’s Request

   __ Rarely

   __Never

 

5. How strong is Security’s influence in determining the priorities for asset protection and risk mitigation actions?
   
   

   __ Absolute

   __ Major

   __ High – as Part of Routing Collaboration

   __ Usually Given Consideration

   __ Low

   __ None – Management Dictates

 

6. What is the level of Security’s participation in the following corporate or divisional decisions?
   
   
1. Physical site location
   

   __ Major   __  Medium via Requests for Input
   __ Low       __None – role determined after decisions

2. Physical site design
   

   __ Major   __  Medium via Requests for Input
   __ Low       __None – role determined after decisions

3. Employee hiring process
   

   __ Major   __  Medium via Requests for Input
   __ Low       __None – role determined after decisions

4. New employee orientation
   

   __ Major   __  Medium via Requests for Input
   __ Low       __None – role determined after decisions

5. Employee training
   

   __ Major   __  Medium via Requests for Input
   __ Low       __None – role determined after decisions

 

7. Regarding acquisitions and mergers, what is Security’s level of advance participation?
   
   

   a. Assess acquisition or merger candidate’s security profile

     __ Always  __ Sometimes  __ Never

   b. Assess requirements for integrating the security functions

     __ Always  __ Sometimes  __ Never

   c. Estimate budget for integrating the security functions

     __ Always  __ Sometimes  __ Never

How would you characterize the roles (whether de facto or specifically assigned), attitudes and effectiveness of Executives and Business Units in ensuring security effectiveness within the organization? (See also the Security Ladder of Involvement guidance.)