The security of a democratic state includes the security of its citizens and today both are contingent on the wider security of the world at large. Similarly, at the level of an organisation its well-being is linked to the security situation within the country. In the prevailing unsafe environment \u2018enterprise security\u2019 could no more be relegated to a set of hired \u2018guards\u2019 and security \u2018supervisors\u2019 since it has become a \u2018mainstream\u2019 function taking care of the organisation as a whole, including its members.
Rise of terrorism as an instrument of \u2018proxy war\u2019, targeting of economic lifelines of the country by the enemy and the advent of natural or man-made disasters on the national security agenda have all impacted on the security and safety of organisations — big or small — and put a new focus on the security management of corporate entities.
Terrorism basically is \u2018resort to covert violence for a perceived political cause\u2019 and since a \u2018cause\u2019 was driven by \u2018motivation\u2019 it was no surprise that faith-based driving force rooted in \u2018radicalisation\u2019 in the Islamic world with its advocacy of \u2018Jihad\u2019, had become the new terror threat globally.
Arising out of certain geopolitical developments traceable to 9\/11 and the resultant \u2018war on terror\u2019 launched by the US, this danger faced nations across the world. India and its strategic establishments were particularly affected because of cross-border terrorism instigated by Pakistan against the country. In the post-Cold war era of \u2018proxy wars\u2019 there is also the added threat of enemy taking recourse to economically damaging the opponent in order to weaken the latter. The need for economic security has in the process, added to the \u2018mainstreaming\u2019 of security function. Also,the importance of proactive measures required by organisations and individuals to deal with disasters, has further sharpened the role of the security set-up of the enterprise. A deeper understanding of security of a business enterprise today calls for a conscious adoption of many practices that added upto the mainstreaming of security function. First, it should be understood that security is basically protection of the three assets of the organisation — physical assets, manpower and protected information, against covert attacks of the enemy.
It clearly runs through the length and breadth of the enterprise correspondingly requiring \u2018physical\u2019, \u2018personnel\u2019 and \u2018information\u2019 security to prevent \u2018sabotage\u2019, \u2018subversion\u2019 and \u2018espionage\u2019 respectively. This makes security a mainstream function by the very nature of its mandate. In sensitive establishments of strategic importance personnel security is of overriding importance.
Apart from \u2018antecedent checks\u2019 at the time of recruitment, there has to be an internal \u2018vigilance\u2019 set up in place integrated with the \u2018security\u2019 function to detect signs of \u2018vulnerability\u2019 in an employee — a member given to addiction, living beyond means or developing an unnatural and intimate friendship with an outsider of opposite gender, may have to be taken note of for reasons of security. As regards security of information, it has to be protected first through \u2018classification\u2019 by way of giving the information a marking like \u2018restricted\u2019, \u2018confidential\u2019 or \u2018secret\u2019 and then determining the \u2018need to know\u2019 ambit within the organisation. Since most information is now on internet, a cyber security administrator under the IT Act is to be appointed and the security head would be a key functionary working with the latter. All of this makes security a very special function. Security is an integral or complete looking concept requiring all its dimensions — physical, personnel and information — security related — to be perfected. Further, security being a protection against the hidden attack of the unseen adversary, it is clearly anchored on information about the likely sources of threat that would have to be collated and analysed.
Most business corporates therefore had a central set-up for studying the market, evaluating the competitors and pooling together all reliable information relating to the three kinds of risks already mentioned. It produces what is called \u2018Business Intelligence\u2019 incorporating the \u2018risk assessment\u2019 for the enterprise. This means that the set-up has to be headed by a competent leader who had the skills of assessing what lay ahead in terms of both \u2018opportunity\u2019 as well as the potential \u2018risks\u2019. This functionary has to be swift in handling information, capable of making assessments and confident about extending the outreach all the time.
Personal security of the leadership of an enterprise that made a substantial contribution to national economy is an important responsibility of this set-up in view of the recognised concept that a country\u2019s economic power strengthened its national security as well. The second most important aspect of security is that it has to work on the authority of the top man of the enterprise. The chief of security has a matching knowledge of how various wings of the organisation were working. He should have the locus standi to take note of any flagrant violation of security even by a senior member of the organisation and for that reason alone should have a direct line of communication with the head of the enterprise.
In fact, it is said that the top man should also consider himself as the head of security. Further, since security embraces all resources and members of the organisation it needs to be incorporated at the level of policy and should be one of the determinants of organisational ethics and in fact of the system of management of the enterprise itself. Also, since security does not come cheap it requires planned funding. On his part the security chief should have the ability to realise that \u2018cost effective\u2019 security was the best security even when the organisation was liberal with funding. If two persons can do a job where three were deployed earlier or when the number of steps for completing an operation could be reduced from four to three, this makes the functioning more efficient and cuts delays. Finally, the ultimate mainstreaming of security is reflected in the dictum — now well established — that the security of an organisation required contribution of all members, high or low in the hierarchy. It flows from the thought that if the enterprise ensured every member\u2019s security then the latter also owed it to oneself to do whatever was possible to strengthen the security of the organisation. The importance of the security set-up being able to run \u2018awareness\u2019 programmes for the organisation as a whole suggests itself. This is best done through periodical informal \u2018briefings\u2019 that would also help to facilitate flow of information relevant to security from members to the security chief.
The security set-up has to be manned by people who were information savvy and professionally up-skilled. Such people can distinguish essentials from non-essentials in the context of security, know that \u2018you have to reach information — information will not reach you\u2019, have curiosity which creates the \u2018spirit of inquiry\u2019, show an interest in human nature and behaviour and have an analytical mind.
The era of \u2018proxy wars\u2019 and the advent of cyber warfare have compelled the world to take note of the convergence of economic security, externally instigated attacks on systems on which the governance of the country rested and resort to \u2018misinformation\u2019 and \u2018deepfakes\u2019 even to influence the outcome of elections in a targeted country. Artificial Intelligence is getting into security domain — both in analysing the threats and finding solutions for dealing with them. Today, people handling enterprise security have to be familiar with various dimensions of knowledge economy and intricacies of misuse of cyber space by the adversary. Security has become a demanding function linked to the mainstream of the organisation that was sought to be protected and dependent on people, who had special skills deserving of a higher level of recognition and compensation than what ever was existing earlier.
D.C. Pathak
(The writer is a former Director of the Intelligence Bureau.
Views are personal)<\/p>\n","protected":false},"excerpt":{"rendered":"
The security of a democratic state includes the security of its citizens and today both are contingent on the wider security of the world at large. Similarly, at the level of an organisation its well-being is linked to the security situation within the country. In the prevailing unsafe environment \u2018enterprise security\u2019 could no more be […]<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[],"tags":[],"class_list":["post-413883","post","type-post","status-publish","format-standard"],"_links":{"self":[{"href":"https:\/\/nagalandpost.net\/index.php\/wp-json\/wp\/v2\/posts\/413883","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/nagalandpost.net\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/nagalandpost.net\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/nagalandpost.net\/index.php\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/nagalandpost.net\/index.php\/wp-json\/wp\/v2\/comments?post=413883"}],"version-history":[{"count":0,"href":"https:\/\/nagalandpost.net\/index.php\/wp-json\/wp\/v2\/posts\/413883\/revisions"}],"wp:attachment":[{"href":"https:\/\/nagalandpost.net\/index.php\/wp-json\/wp\/v2\/media?parent=413883"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/nagalandpost.net\/index.php\/wp-json\/wp\/v2\/categories?post=413883"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/nagalandpost.net\/index.php\/wp-json\/wp\/v2\/tags?post=413883"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}