Most security failures involving security-as-a-service models exploit a process gap rather than a technical one. A control on this strand of corporate security practice that is never exercised is an assumption, not a defence. Participants apply this part of corporate security practice to their own protected site throughout, so the output is directly usable. Ambition around security-as-a-service models outruns capacity unless the sequencing is deliberate. The result is the confidence to make and defend decisions about the corporate security practice discipline under scrutiny. It is pitched for practitioners with responsibility for the wider corporate security practice agenda, not for observers of it. The programme is built to be used, and every section of security-as-a-service models it covers ends in something applicable. Practitioner evidence points the same way: this part of corporate security practice improves fastest where responsibility for it is named and owned. The programme closes with an action plan for the corporate security practice capability that each participant writes for their own organisation.
Expected Learning Outcomes
✓
Design surveillance coverage for security-as-a-service models that supports investigation.
✓
Sequence improvements to security-as-a-service models so that each step makes the next one easier.
✓
Verify that improvements to security-as-a-service models have held six months after they were introduced.
✓
Review security-as-a-service models after each incident, exercise and change of threat.
✓
Establish access control and identity verification appropriate to security-as-a-service models.
✓
Assess and control third-party and contractor exposure in security-as-a-service models.
✓
Present the case for investment in security-as-a-service models in terms that a finance function will accept.
Who Should Attend
✓
Control room and monitoring staff operating security-as-a-service models.
✓
Investigation and loss prevention specialists working on security-as-a-service models.
✓
Human resources staff handling vetting and insider risk in security-as-a-service models.
✓
Facility and site managers accountable for protection of security-as-a-service models.
✓
Those responsible for briefing external stakeholders on security-as-a-service models.
✓
Consultants and advisers supporting clients on security-as-a-service models.
Course Modules
Open any module to see its sessions and topics.
01
Security-as-a-service models: incident response and escalation
2 sessions · 8 points
Session 1Surveillance on security-as-a-service models that supports an investigation later
Confirm recorded material from security-as-a-service models is retained long enough to be useful.
Rank the weaknesses in security-as-a-service models by consequence rather than by ease of fixing.
Protect sensitive information relating to security-as-a-service models from casual disclosure.
Confirm vetting standards applied to staff and contractors in security-as-a-service models.
Session 2Testing security-as-a-service models before relying on it
Check that security-as-a-service models still works when volumes rise unexpectedly.
Identify single points of dependency in security-as-a-service models and reduce them.
Establish what evidence demonstrates security-as-a-service models is under control.
Establish the boundary of security-as-a-service models and record what sits outside it.
