Advanced Enterprise Security Management Training Course

Participants can establish governance arrangements that assign security authority, accountability and escalation routes.

• Governance charters defining authority, accountability, escalation, and decision rights
• RACI matrices for corporate security, facilities, information technology, and operations
• Security steering committees with defined agendas, evidence, and action tracking
• Policy exceptions controlled through documented risk acceptance and expiry dates
• Delegated authority limits for emergency expenditure and protective measures
• Management review cycles aligned with ISO 18788 requirements

Participants can produce an intelligence-led security risk assessment with prioritised treatment actions.

• ISO 31000 principles applied to enterprise security risk assessment
• Threat actor profiling using intent, capability, opportunity, and target attractiveness
• Source evaluation using reliability and information-credibility grading methods
• Risk scenarios written with cause, event, consequence, and existing controls
• Likelihood and impact scales calibrated against operational and strategic consequences
• Risk registers distinguishing inherent risk, residual risk, and risk owners

Participants can establish intelligence requirements and turn relevant information into actionable security assessments.

• Priority intelligence requirements tied to executive security decisions
• Collection plans covering internal reporting, suppliers, media, and official sources
• Analysis of competing hypotheses for ambiguous threat information
• Indicators and warnings linked to pre-agreed protective actions
• Intelligence brief formats for executives, travellers, sites, and response teams
• Information handling rules for sensitivity, retention, dissemination, and privacy

Participants can design a risk-based security programme with proportionate controls and implementation priorities.

• Control selection using deterrence, detection, delay, response, and recovery
• Defence-in-depth design for people, assets, information, and operations
• Security control baselines differentiated by risk tier and asset criticality
• Treatment plans assigning actions, owners, resources, milestones, and assurance evidence
• Residual-risk decisions documented through accountable management acceptance
• Control dependencies mapped across security, technology, facilities, and operations

Participants can specify physical security controls based on threat, asset value and operational needs.

• Crime Prevention Through Environmental Design principles for site protection
• Layered protection zones from perimeter through critical internal areas
• Security surveys assessing boundaries, access points, sightlines, and vulnerabilities
• Access control design using least privilege and role-based permissions
• CCTV operational requirements covering purpose, coverage, retention, and response
• Security lighting, intrusion detection, and monitoring room performance criteria

Participants can establish proportionate personnel security and insider risk controls across the employment lifecycle.

• Personnel security lifecycle from recruitment through exit and post-employment access
• Vetting criteria matched to role sensitivity, legal limits, and risk
• Insider threat indicators assessed without stereotyping or unlawful monitoring
• Segregation of duties reducing fraud, sabotage, and unauthorised disclosure opportunities
• Joiner-mover-leaver controls coordinated with human resources and information technology
• Confidential reporting channels, case triage, and welfare-based intervention routes

Participants can plan duty-of-care measures for travellers, executives and personnel in higher-risk locations.

• Travel risk assessments based on destination, traveller profile, itinerary, and activity
• Journey management plans specifying communications, routes, check-ins, and contingencies
• Executive protection threat assessments distinguishing visibility, exposure, and vulnerability
• Country security briefs using threat indicators and operational restrictions
• Medical, evacuation, kidnap, and detention contingencies within travel plans
• Traveller tracking governance balancing duty of care and privacy

Participants can procure, oversee and assure security suppliers using measurable performance requirements.

• Supplier due diligence covering capability, ethics, insurance, and ownership
• Statement-of-work specifications defining posts, patrols, response, and reporting
• Service-level agreements with measurable staffing, attendance, and incident standards
• Contractor induction requirements for site rules, confidentiality, and emergency actions
• Supplier audits using evidence sampling, interviews, observation, and record review
• Corrective action plans tracked through owners, deadlines, verification, and closure

Participants can manage guard force and security operations centre performance against defined operational standards.

• Operating procedures for alarm handling, dispatch, escalation, and incident logging
• Guard deployment models matched to threat periods, asset criticality, and demand
• Post orders written with duties, limits, reporting, and emergency instructions
• Control room quality assurance through call review and incident record sampling
• Shift handover standards capturing outstanding risks, faults, and priority actions
• Performance dashboards covering response times, patrol completion, and recurring incidents

Participants can lead structured security incident responses from first report through stabilisation and handover.

• Incident classification criteria based on consequence, urgency, and escalation thresholds
• Incident command system roles for command, operations, planning, logistics, and liaison
• First-hour actions protecting life, evidence, communications, and critical operations
• Common operating picture maintained through verified facts, decisions, and resource status
• Tactical communication protocols for responders, leaders, employees, and external agencies
• Handover arrangements between incident command, crisis management, and recovery teams

Participants can support executive crisis decisions with clear information, options and consequence analysis.

• Crisis management team structures aligned with strategic decision responsibilities
• Strategic incident objectives framed around people, operations, reputation, and obligations
• Decision logs recording options, rationale, authorities, and follow-up actions
• Executive situation reports separating confirmed facts, assumptions, and information gaps
• Stakeholder communication plans for regulators, clients, employees, families, and media
• Crisis room protocols for meeting rhythm, task tracking, and confidentiality

Participants can integrate security arrangements with business continuity, recovery and resilience planning.

• ISO 22301 continuity requirements connected to security disruption scenarios
• Business impact analysis identifying recovery priorities, dependencies, and maximum downtime
• Security continuity plans for lost sites, disrupted communications, and workforce displacement
• Recovery strategies covering alternate premises, protective resources, and critical suppliers
• Crisis-to-recovery transition criteria with accountable recovery leadership
• Lessons-learned reviews converting incident findings into continuity and security improvements

Participants can coordinate physical and cyber security controls around shared threats and dependencies.

• Cyber-physical risk scenarios involving access systems, cameras, networks, and data
• NIST Cybersecurity Framework functions mapped to physical security dependencies
• Identity and access management links between badges, accounts, and privileged access
• Joint incident triage for suspicious activity, system failures, and data compromise
• Technology assurance for connected security devices and remote maintenance access
• Information-sharing protocols between security operations, information technology, and privacy teams

Participants can manage security investigations that preserve evidence and support fair, defensible decisions.

• Investigation plans setting allegations, scope, authority, hypotheses, and evidence sources
• Evidence preservation using chain-of-custody records and secure storage controls
• Interview planning based on chronology, corroboration, fairness, and disclosure limits
• Case management logs recording actions, findings, decisions, and procedural milestones
• Root cause analysis using five whys and barrier-failure review
• Investigation reports separating facts, analysis, conclusions, and recommendations

Participants can measure security performance and provide assurance evidence for management review.

• Key risk indicators showing changing exposure, control failure, and emerging threats
• Key performance indicators measuring response, compliance, quality, and service delivery
• Balanced scorecards linking security activity to business protection outcomes
• Audit programmes sampling policy compliance, control operation, and evidence quality
• Management review packs presenting trends, exceptions, decisions, and resource needs
• Maturity assessments identifying current state, target state, and improvement priorities

Participants can prepare evidence-based security budgets and investment cases for senior decision-makers.

• Security cost models separating capital expenditure, operating expenditure, and contingent costs
• Business cases linking proposed controls to risk reduction and operational benefits
• Cost-benefit analysis using avoided loss, service improvements, and implementation costs
• Scenario analysis testing investment choices under changing threat assumptions
• Budget prioritisation through risk ranking, legal obligations, and asset criticality
• Executive recommendations stating decision required, options, consequences, and funding

Participants can build security behaviours and change controls that sustain programme performance.

• Security culture diagnostics identifying beliefs, routines, incentives, and reporting barriers
• Role-based security training linked to specific risks and expected behaviours
• Behavioural observation methods for identifying unsafe or insecure work practices
• Change impact assessments for new sites, technology, processes, and suppliers
• Communication plans addressing audience, message, channel, timing, and feedback
• Control adoption measures tracking awareness, compliance, exceptions, and recurring errors

Participants can build, review and present a complete enterprise security management plan with governance, risk, controls, response and assurance arrangements.

• Security context statement defining assets, stakeholders, obligations, and operating priorities
• Enterprise threat and risk profile with prioritised treatment decisions
• Governance model assigning accountability, escalation routes, and management review cycles
• Integrated control plan covering physical, personnel, travel, supplier, and cyber interfaces
• Incident, crisis, continuity, and recovery arrangements tested against credible scenarios
• Executive presentation presenting investment priorities, residual risks, and assurance measures