2012 Security 500 Leader Profiles

Stephen Morrill, Executive Director, Corporate Security

Unique Risks

“Our strategic focusis on risk and resilience first and operational security to mitigate it, second,” shares Steve Morrill, Executive Director, Corporate Security at Charles River Labs. “Our work includes identifying which events are most likely to impact us and how to best eliminate vulnerabilities and be prepared to respond.” Charles River Labs and Morrill face the clear reality that people protest against their business, which includes the use of laboratory animals in science. “Our risk is somewhat unique because we have a defined opposition that enables us to gather intelligence, assess the risks and identify how to best mitigate them. Our company has no objection to legal protest, but we do object to illegal actions.”

Charles River Labs business provides tailored research models and laboratory animal support services, as well as preclinical and clinical support services, to help its global partners accelerate their research and drug development efforts. Its partners include all of the major pharmaceutical and biotechnology companies worldwide, as well as government research centers and leading hospital and academic institutions, requiring a high level of risk assessment for physical, logical and intellectual asset protection.

In addition to animal rights extremist criminal acts, the security organization focuses on cyber crime, workplace violence, employee-visitor misconduct and business continuity planning. Morrill and his six person team are responsible for the strategic planning and development of security initiatives including policy, goals and objectives, and training for the company’s 70 plus worldwide locations and 8,000 employees. Today the company has more than $1.14 billion in revenue and invests more than $12.5 million in its global security program.

Cyber security is shared with the CISO, who is directly responsible for the company’s global network. Morrill works with him to develop strategies that ensure the network and the company’s intellectual property are secure. “This is a constant issue, especially with animal activists seeking political recognition through hacking. Their goal is typically not monetary gain. Due to the nature of our business, the most important data we protect is customer data. We host critical intellectual property of our customers for their research programs,” says Morrill.

“Workplace violence continues to be a critical issue,” he adds. “We proactively employ web-based training programs and partner with local law enforcement to bring awareness and understanding to this issue. It is important people know they can seek help or that others speak up to help someone who is struggling before an event occurs.” The company has consistently received positive responses to their awareness and education programs from employees.

Business resilience has also been a strong focus for Morrill’s team. “We measure our success through customer satisfaction – our Business Continuity planning is consistently reviewed by our customers and must remain crisp to changes within the organization and market place. Having a global business certainly implies greater risk to weather, political unrest, natural disasters and business disruptions. As a result, we have worked to develop greater risk assessments and resilience planning to protect our employees, stakeholders and assets,” Morrill says. “In every aspect of our business, including risk and security, the goal of management is to apply our resources appropriately.”

The security program’s contribution is measured regularly. Morrill reports to the Executive Committee two to four times per year. Morrill and his team conduct annual audits of their sites and report their findings within the Executive Committee with recommendations for improvements. Security works with site and division management to execute against those plans. The expectation is that security is compliant with best practices within the industry. “Our goal is to be seen and not heard, unless necessary,” offers Morrill. “CEOs should understand that Security must remain a competent partner in the development of strategies that will not only keep employees and visitors safe and secure, but also compel customers to continue to expand their business commitment as we protect their image and brand,” he says.

Morrill has more than 40 years of security experience. He is a 1971 graduate of Bentley College with a BS degree in accounting. He is also a graduate of the FBI Academy in Quantico, Va. He enjoyed a 30-year career with the FBI and other leading private organizations.

Morrill and his wife Maureen enjoy golfing, sailing and dining out with friends. They have two adult sons, one working as a consultant in Washington, DC and the other in the Boston area. Morrill is involved as a member of the Board of a New England based charity – Cops For Kids With Cancer, which provides grants to families in need with children fighting cancer.

If he were not a CSO, he would be working within the private investigators world, interviewing and gathering evidence.