Security Management for Corporate Security Managers Training Course

Course overview

Corporate security managers are expected to protect people, sites, information and operations while justifying expenditure to senior leaders. This requires more than supervising guards or responding to incidents: managers must identify credible threats, quantify exposure, set proportionate controls, manage suppliers and demonstrate that security measures support business continuity, health and safety, and operational resilience. This course addresses the practical challenge of turning a reactive security function into a governed, measurable security programme.

Participants learn to build and operate a corporate security management system across offices, industrial sites, warehouses and multi-site portfolios. The course covers threat and risk assessment, security survey methods, control selection, security policy design, incident command, investigation governance, crisis and business continuity integration, contractor oversight, executive reporting and budget prioritisation. Participants practise using risk registers, treatment plans, key performance indicators, post-incident reviews and assurance schedules aligned with ISO 31000, ISO 22301 and ISO 18788 principles.

Instruction combines facilitated technical sessions with realistic corporate scenarios, including workplace violence, unauthorised access, theft, disruption, insider risk and severe-weather incidents. Participants work through site-security data, prepare decision papers and test response choices with peers. Each participant leaves with a tailored Corporate Security Management Plan containing a risk register, control improvement roadmap, incident escalation matrix, supplier assurance checklist and dashboard design that can be adapted for immediate use in their organisation.

The course is designed for professionals who already hold security, facilities, resilience or HSE responsibilities and now need to manage security as a business risk function. It is equally useful for managers seeking a defensible framework for investment decisions, governance reporting and consistent site-level performance.

Course objectives

By the end of this course, participants will be able to:

• Conduct a structured corporate security risk assessment using threat, vulnerability, consequence and control-effectiveness criteria
• Produce a prioritised security risk register and risk treatment plan for a corporate site or portfolio
• Design proportionate physical, procedural and technology controls using defence-in-depth principles
• Create a corporate security policy framework with roles, escalation thresholds and assurance requirements
• Build an incident management and investigation process including evidence handling, reporting and corrective actions
• Develop security performance indicators and an executive dashboard that links controls to business risk
• Evaluate guarding, access-control and monitoring suppliers through measurable service-level and assurance criteria
• Prepare a Corporate Security Management Plan with a funded improvement roadmap and implementation milestones

Benefits of attending

Target competencies

Who should attend

• Corporate Security Managers — who need to govern risk, people, technology and suppliers across one or multiple sites
• Security Operations Managers — who must convert operational incidents and patrol activity into management-level assurance
• Regional Security Managers — who need consistent standards and reporting across geographically dispersed facilities
• Facilities and Workplace Managers — who share responsibility for site access, contractor control and occupant safety
• Business Continuity and Resilience Managers — who need security controls integrated with crisis and continuity arrangements
• HSE Managers — who oversee workplace risk systems and require stronger coordination with corporate security functions

Requirements and prerequisites

Participants should have practical experience in a corporate security, facilities, HSE, business continuity or operational management role. They should be familiar with basic site-security concepts such as access control, visitor management, guarding, CCTV, incident reporting and risk ratings. Experience reviewing incidents, supervising contractors or contributing to risk assessments is helpful. Participants should be able to work with spreadsheets and write short management reports. No prior certification in ISO standards, formal policing background, technical CCTV installation knowledge or security engineering qualification is required; the course explains how to apply standards at management level.

Training methodology

The five-day programme uses instructor-led briefings to establish methods, followed by worked security-risk scenarios, small-group site surveys and facilitated management simulations. Participants assess a fictional corporate facility, score risks, select controls, review incident evidence and challenge supplier performance data. Case discussions examine how security decisions affect HSE, continuity, legal exposure and employee confidence. Daily outputs are progressively assembled into an individual Corporate Security Management Plan. On the final day, participants present their roadmap to a simulated executive panel and refine it through peer and instructor feedback.

Course outline

Day 1: Corporate security governance and risk foundations

• Corporate security management system architecture
• Security governance roles and accountabilities
• ISO 31000 risk-management principles
• Threat, vulnerability and consequence analysis
• Risk appetite and tolerance statements
• Security risk-register design and scoring scales
• Legal, ethical and privacy considerations in security operations

Workshop: Participants complete a baseline threat assessment for a corporate headquarters and produce an initial ranked security risk register.

Day 2: Site protection and control design

• Security survey methodology and site walk-through criteria
• Defence-in-depth control design
• Perimeter, reception and visitor-management controls
• Access-control system permissions and audit trails
• CCTV coverage planning and monitoring governance
• Guard-force deployment and post-order design
• Insider threat and workplace violence control measures

Workshop: Participants conduct a desk-based security survey of a multi-tenant facility and produce a prioritised control-improvement plan.

Day 3: Incident management, investigations and resilience

• Incident classification and escalation thresholds
• Security incident command roles and decision logs
• Evidence preservation and chain-of-custody principles
• Investigation planning and interview governance
• Root-cause analysis using the five whys method
• Corrective-action tracking and lessons-learned reviews
• Integration with crisis management and ISO 22301 continuity arrangements

Workshop: Participants manage a simulated unauthorised-access incident and produce an escalation record, investigation plan and corrective-action log.

Day 4: Supplier assurance, performance and investment decisions

• Security supplier due diligence and prequalification
• ISO 18788 management-system principles for private security operations
• Guarding service-level agreements and measurable post orders
• Security technology procurement requirements
• Supplier audit checklists and nonconformance management
• Security KPIs, KRIs and leading indicators
• Business cases for risk-based security investment

Workshop: Participants evaluate a guarding-provider scorecard and prepare a corrective-action notice and investment recommendation for management.

Day 5: Security programme leadership and executive assurance

• Multi-site security programme planning
• Policy hierarchy and security procedure control
• Executive dashboard design and reporting cadence
• Residual-risk acceptance and decision authorities
• Security culture and employee reporting mechanisms
• Implementation roadmaps, milestones and ownership
• Management review and continual-improvement cycles

Workshop: Participants finalise and present a Corporate Security Management Plan with a risk register, dashboard, assurance schedule and 90-day implementation roadmap.

Tools & standards covered

ISO 31000, ISO 22301, ISO 18788, Genetec Security Center

A typical training day

Live online deliveries follow the same structure in the East Africa Time zone, with shorter screen blocks and longer breaks.

What the fee includes

How you can take this course

Certification

Participants who complete the full five days receive the Skillset Development Certificate of Completion, stating the course title, course code, dates and delivery format — suitable for professional-development records and employer reimbursement.

Frequently asked questions