Security arrangements around disaffected employee risk are tested by adversaries, not by auditors. Insider risk in this part of corporate security practice is uncomfortable to discuss and expensive to ignore. It is written for people who have to make this aspect of corporate security practice work with the resources they already have. The method assumes participants will be challenged on their handling of disaffected employee risk and prepares them for it. The course gives participants a defensible structure for this strand of corporate security practice and the judgement to adapt it. Participants gain a realistic view of what this part of corporate security practice costs and what it returns. The version of disaffected employee risk described in the manual and the version practised on the floor tend to diverge over time. Post-incident reviews keep identifying weaknesses in this strand of corporate security practice that were visible long before the incident. It closes by agreeing the smallest change to the corporate security practice capability that would make a visible difference.
Expected Learning Outcomes
✓
Identify vulnerabilities in disaffected employee risk and rank them by consequence.
✓
Select indicators that show whether disaffected employee risk is improving, and reject those that only look useful.
✓
Address insider risk and personnel vetting relevant to disaffected employee risk.
✓
Document decisions about disaffected employee risk in a form that remains useful after the people change.
✓
Exercise and test arrangements for disaffected employee risk under realistic conditions.
✓
Review disaffected employee risk after each incident, exercise and change of threat.
✓
Establish what evidence would demonstrate that disaffected employee risk is under control.
Who Should Attend
✓
Contract managers overseeing outsourced security in disaffected employee risk.
✓
Security managers and officers responsible for disaffected employee risk.
✓
Risk managers assessing exposure from disaffected employee risk.
✓
Facility and site managers accountable for protection of disaffected employee risk.
✓
Managers with direct responsibility for disaffected employee risk within the protected site.
✓
Internal auditors reviewing how disaffected employee risk is designed and operated.
Course Modules
Open any module to see its sessions and topics.
01
Disaffected employee risk: investigation, evidence and reporting
2 sessions · 8 points
Session 1Assessing the threat to disaffected employee risk specifically, not generically
Define the trigger that would require disaffected employee risk to be redesigned.
Confirm that contractual obligations around disaffected employee risk are understood.
Define the first response actions for an incident involving disaffected employee risk.
Assess contractor and third-party exposure within disaffected employee risk.
Session 2Escalation and decision rights in disaffected employee risk
Set escalation criteria and out-of-hours contacts for disaffected employee risk.
Record the rationale for each significant choice made about disaffected employee risk.
Review surveillance coverage for disaffected employee risk against likely approach routes.
Arrange the handover of disaffected employee risk so capability survives staff changes.
02
Disaffected employee risk: continuity, exercises and external coordination
2 sessions · 8 points
Session 1The first fifteen minutes of an incident involving disaffected employee risk
Identify single points of dependency in disaffected employee risk and reduce them.
Exercise the plan for disaffected employee risk under realistic conditions and record failures.
Map the handovers in disaffected employee risk between functions and secure them.
Name a single owner for each element of disaffected employee risk.
Session 2Supervising the guard force on disaffected employee risk
Write down the assumptions underpinning the approach to disaffected employee risk.
Establish the boundary of disaffected employee risk and record what sits outside it.
Review disaffected employee risk after every incident, exercise or change in threat.
Test the procedure for disaffected employee risk against a realistic scenario.
