Question

ASSIGNMENT

ANSWER ANY TWO OF THE FOLLOWING IN 2-3 PARAGRAPHS OF EACH QUESTION.

1: Where is the optimal place for security in an organization? Where does security normally reside? If there's a difference, explain why?

2: Does a person's or position's title make a difference? Explain if job title's for security change it's potential or real influence in an organization

3: Why is it important for security professionals to understand security management? Does understanding classical management theories help security professionals?

Answer 1

It is very important to have physical security in an organisation.Physical security is a set of security measures taken to ensure that only authorized personnel have access to equipment, resources and other assets in a facility. Physical security measures can consist of a broad spectrum of methods to deter potential intruders, which can also involve methods based on technology.

Physical security is a comprehensive term for a broader security plan. It is fundamental to all other security measures, for example: barricading the entrance of a data center facility would be the first point of physical security and a bio metric door to access a computer in the server room inside this building will be further level of security. These might be few optimal places for security in an organisation.

Normally, the security of an organisation lies in confidentiality,integrity and availability because these are the most important aspects of an organisation. There is no actual difference between optimal place for security and where the security actually lies because both the aspects have almost same functionality.

Though both are critical, physical and information security remain separate entities at many organizations.But this is not correct.The integration is a first step towards assessing the overall corporate risks that threaten a company.Keeping physical and information security separate, as so many companies do, can create gaps between the two entities that let intrusions go unnoticed.

Information security can be same in both for-profit and non-profit organisations. Though there is a difference in the importance of profit making in these organisations but the importance of information does not change. So, same roles can be followed in both the organisations.