The Security Function within the Organizational Structure - Case Study Example

Security in Organization This study will focus on EKK as a company to evaluate its structure. EKK is a fashion organization that sells clothes with in USA and also export clothes to other parts of the world. It has chain stores in 50 big cities of the world. The company has a divisional Structure: Grouping by Similarity of Purpose as its organizational structure. This structure enables the organization to have a high sense of division of labor, where departments are responsible for themselves. It provides the best structure to embed as security system due to its high sense of integration. This structure also allows for closer supervision of the security system and further allows for identification of the weak areas of security. In its entirety, a divisional structure is a self-evaluative structure the need little audit services. The manner in which security should be organized is a question that has attracted debate from many realms. (Coskun, H. G., 2008) Some chief security officers have argued that there is a need for security reporting within the facilities of operation. This may include legal as well as information technology. In every department in an organization, security is always at the center of concern. There is always a need for the Chief Security Officers to ensure that they design a meaningful relationship with other officers who, may include, financial, Executive, Operations, risks and information. They also need to endeavor in providing the best possible service at the least cost possible. What is particularly emerging as a trouble is how organizations will ensure that the information security and the physical security both work together. (Maguire, E. R. 2003) However, it is upon each company to ensure that they find solution to the issue of security that will address their own concerns. To this end, the study will examine EKK as the organization in question. The study will attempt to examine how the company practices its security functions. It is unfortunate that EKK has a long way from putting in place, best practices that would ensure security issue is addressed conclusively. In the review of the organization’s security system, there was no mentioning of the organizational structures that deals and addresses security issues within the organization. The company has one individual who handles physical security and is also preoccupied with the training of the employee on the information security as well as the investigation of information and physical breach of security. Though these training are conducted to the employees of EKK, the organization does not have adequate facilities that would be useful in the enhancement of quality security training. The company needs a lot more investment particularly in allocating adequate budget to the security sector. Studies reveal that in companies where Chief Security Officers work along with the Human Resource office, there is always a high chance that such organization would be having enough training materials that they need for a successful security training. (Maguire, E. R. 2003) Other companies have however insisted that having chief security office work as Human resource managers or to work along the HR is the worst thing that can happen to any company. (Tipton, H. F., & Krause, M. 2005) This is because HR’s work is to deal with the facilities, which should be more preoccupied with keeping of cost down, a situation that may not work well with the environment of a security EKK has put security information under one individual, both as physical security and information security. The company has created a separate risk assessment position. Different organizations have tried to describe different security structures depending on what the organization handles as their business. Compared to other organizations’ such as Crown America Property, EKK has also invested in Information security but not just physical security within its premises. It is important that companies realize that the structure that they may be using currently may not be able to work tomorrow. Some organizations are still gambling with the security particularly in the governance structure, with the focus on looking for a better combination to use in the security. Some of the companies who do not want to gamble with the issue of security have separated the roles of security into two, one as a physical security department and another as the information security department. In order to achieve compliance, EKK has attempted to focuses on Information security for some time now particularly with the fact that some of the information in the clients files are very sensitive and would put their business at risk. There is however a close coordination between the Information Security and the physical security. The information security section of EKK does not hold stake however in the organizational chart. The officers in charge on the Information security however works along with other outside security information experts as a way of enhancing security audit within the organization. Working with the audit allows EKK Company to obtain knowledge on Infosecurity, a knowledge which they may then be shared by other officers in the system. The Audit companies that EKK relies on has powerful tool that is used to enforce security procedures. Though the distribution sections of EKK operate independently, the company has insisted that there must be some baseline procedures that must be followed and must be in compliance with the policies and procedures of the audit. (Tudor, J. K., 2001) There has been some controversy surrounding the use of information security. This controversy is grounded on the idea of folding information security together with the security of the corporate. The structure that EKK is currently suing is a new concept to many organizations, and yet, the concept has stayed longer in the industry. There have been some arguments that insist that physical security and Information Security go along each other. Some researchers however insist that trying to combine the two concepts is a fad and should not be appreciated under any circumstance. (Gilbert, F. 2012). In order avoid conflict between the two functions, some organizations have attempted to separate the two functions and have maintained that situation by constantly engaging in regulatory motivation. From the study, it is clear that there are a number of factors which have been identified by information security experts to be essential in any organization interested in achieving some level of information security. The results have also indicated that prevention of breach of security through unauthorized access of organization’s data requires some level of security. Steps need to be taken which would ensure that employees are also trained adequately on security matters as well as the consequences of behaviors that do not sustain security. This is also the same measures that have been taken by EKK Company. The study has also revealed some ethos concerning information security and why they need to come from the top of the organization structure. This enables the employees to conceive and encourage good behaviors that are stipulated in the policies and regulations concerning security Another very critical thing that has been observed is the aspect of the budget. Organization that seriously appreciates the importance of security to the success of the businesses needs to consider making a convincing budget for the process. Clearly, there is a need for organizations to consider security of the data that is held by it to ensure confidence of the public. EKK has attempted to observe all these requirements, which gives them a better edge compared to their competitors. The structural organization of their system presents them with opportunity to implement the security policies that they have put in place. References Coskun, H. G. (2008). Integration of information for environmental security environmental security, information security, disaster forecast and prevention, water resources management. Dordrecht: Springer. Gilbert, F. (2012). Thirteenth annual Institute on Privacy and Data Security Law. New York, N.Y.: Practising Law Institute. Maguire, E. R. (2003). Organizational structure in American police agencies context, complexity, and control. Albany: State University of New York Press. Tipton, H. F., & Krause, M. (2005).Information security management handbook (5th ed.). London: Taylor & Francis e-Library. Tudor, J. K. (2001). Information security architecture: an integrated approach to security in the organization. Boca Raton, Fla.: Auerbach. . . Read More