13 - How to change

Abstract

The process of converging or integrating security teams or functions can be very different for organizations, depending on their size, structure, and political ability to adopt a new formation or process. It is noted that major obstacles to change can include turf wars, power struggles, fear, lack of defined goals, and lack of information. It is observed that practice does not make security processes perfect but if repeated, correct practice moves the security program toward perfection. The chapter discusses best practice activities when preparing to make a change. Acquiring an executive-level sponsor is a key determinant in achieving success when converging security functions. It is important to have a clear and well-articulated vision for change. Defining exactly what the new vision is can be difficult and crucial. Any time there are changing or shifting roles in an organization, there can be some confusion. During the transition and education period, it is imperative to have a solid change management plan.