Projects
AESRM maintains a full schedule of planned projects designed to address the evolving security needs of businesses around the world. Results of AESRM projects are published on the web site for free download.
Alliance Offers Convergence Webinar
On 20 November 2007, AESRM hosted a webinar titled "The Convergence of Physical and Information Security in the Context of Enterprise Risk." This one-hour webinar touched on the general state of security convergence, the integration of converged security as part of ERM, the role of risk councils, and the benefits of a strategy for converged risk management. The archived version is now available for view.
AESRM and Deloitte Issue Results of Worldwide Study Examining the Issues of Enterprise Risk Management and the Convergence of Physical and Logical Security
In 2006, AESRM retained Deloitte & Touche LLP Canada to research and develop a report addressing the:
- Value of security as part of enterprise risk management (ERM)
- Benefit of a converged view of security in managing enterprise risk
The material that forms the basis of AESRM's new study, The Convergence of Physical and Information Security in the Context of Enterprise Risk Management, includes surveys and interviews conducted by Deloitte Touche Tohmatsu member firms for AESRM, material developed by Deloitte, and prior research conducted by AESRM. The survey conducted by Deloitte drew on the insights and experiences of security executives representing traditional and information security disciplines who are members of ASIS International and ISACA. These security executives provided insight into the:
- General state of security convergence
- Integration of converged security as part of ERM
- Role of risk councils
- Benefit that a strategy for converged risk management plays in breaking down communications barriers between security disciplines and in promoting better risk management among those responsible for managing risk across the enterprise
Publications
- The Convergence of Physical and Information Security in the Context of Enterprise Risk Management (PDF), August 2007
- Convergence of Enterprise Security Organizations: International Views - Addendum (PDF), October 2006
- Convergent Security Risks in Physical Security Systems and IT Infrastructures (PDF), September 2006
- Slides from ISACA Network Security and Information Security Management conferences:
- Security Convergence: Current Corporate Practices and Future Trends (PDF), November 2005
- Convergent Security Risks in Physical Security Systems and IT Infrastructures (PDF), September 2006
- Convergence of Enterprise Security Organizations: International Views (PDF slides), September 2006
- Security Convergence: Current Corporate Practices and Future Trends (Webcast), November 2005