Security Is Everybody's Business: Transforming Security Into a Core Business Practice in the SHE Model

摘要

A security focus in recent years has driven the recognition of synergies between security management and existing safety, health and environment (SHE) management programs in many industries. While safety has a long history as a core business practice within the petrochemical industries, several key roadblocks exist with a similar integration of security. The most effective oil and gas company safety programs are those that are implemented and owned at the field level. However, security-related issues have historically been managed by corporate/functional security departments, rather than at an operational level. We believe that integration of security into existing corporate SHE management programs and practices is key to effective implementation. As such, successful integration of security as a core business practice requires both ownership and implementation at the operations level, as well as technical functional guidance and quality assurance from competent security professionals within the organization. Reporting of meaningful security-related performance indicators still remains primarily in the realm of leading indicators (activity-based), whereas, useful analysis of robust safety programs require evaluation of causal relationships between leading and lagging indicators. This in part is due to the lack of long-term data for comparison, but more importantly the causal effect of external influences related to lagging indicators (incidents), and will slowly change with time. Efforts to increase security awareness by employees need to mirror safety awareness programs. Successful implementation strategies include mixed media packages (video, print, logos, web) along with training and workshops designed to promote security as a core business practice. Effective integration of security into core business practices has resulted in success stories involving employees exhibiting security conscious behaviors, as well as statistics illustrating both increased reporting/incident prevention and security vulnerability gap closures.