This model allows the security leader and team to work with business leaders to monitor resources, understand security risks, and, together, deliver the most appropriate and effective solutions to mitigate those risks. Security leaders can also use the information gathered during the risk-based reboot to understand and communicate the total cost of ownership of the security program — based on the value of the business’s assets that are exposed to certain security risks — as well as the cost of the various resolutions that are put in place.

Enterprise Security Risk Management (ESRM) is a strategic approach to security management that ties an organization’s security practice to its overall strategy using globally established and accepted risk management principles. In ESRM, the security professionals and the asset owners share security responsibilities, but all final security decisions are the responsibility of the asset owner.

George E. Battle III has been named vice chancellor for institutional integrity and risk management for the University of North Carolina-Chapel Hill. 

Preparing for the worst is part of every security professional’s repertoire, especially when it comes to planning for failure.

Every day in businesses across industries, there are myriad negative events occurring within a company’s workforce, which can include full-time employees to part-time staff and contractors.