Time to move toward a common conclusion?

Jun 1, 2006 12:00 PM, LARRY ANDERSON, EDITOR

Are you approaching the same point from two directions? Are you moving toward union or a common conclusion or result?

Based on the prominence of the word convergence in our industry's vernacular, my guess is that you are. But those are Webster's definitions, and when we think of convergence in our industry, we mean something more specific — but are we always clear exactly what that is?

I have heard convergence used to describe the coming together of technologies in our marketplace, especially the encroachment of information technology (IT) elements into the equipment that drives security applications, and a resulting need to involve IT in purchasing decisions.

But I have also heard it used in conjunction with the coming together of security functions within a corporation — specifically the combination of physical security worries and information security worries into one big group of worries with a designated corporate worrier.

However, turning to a study commissioned by a group of industry associations, I came across a broader definition of convergence for today's companies. The document suggests that convergence is “about integrating the security disciplines with the business's mission to deliver shareholder value.” It later suggests that convergence is leading to “innovative approaches” that integrate “the risk side of business into the strategic planning side in a consistent and holistic manner.”

Who knew that by convergence we meant that the security function is converging to be a more integral part of the company? And yet it makes perfect sense. This wisdom is courtesy of “Convergence of Enterprise Security Organizations,” a report developed by consultants Booz Allen Hamilton, commissioned by “The Alliance for Enterprise Security Risk Management.” The alliance is made up of ASIS International, the Information Systems Audit and Control Association (ISACA) and the Information Systems Security Association (ISSA).

What better framework for convergence than to focus on corporate strategy as a common element?

If we do, the resulting “business-focused framework will allow security elements to become part of the strategic landscape of the enterprise.” It tears down internal corporate barriers if we all keep in mind that we are working toward the same goals. Maybe the definition of convergence is as simple as “working together.”

YOUR THOUGHTS

We are looking for reader feedback. E-mail larry.anderson@penton.com and tell us what you think!

Want to use this article? Click here for options!
© 2008 Penton Media Inc.

This month in Access Control

• Opening Up About Door Closers
• An Enterprise Approach
• The Framework For Open Systems
• On A Higher Plane
• More from April's issue