Ask a leadership team who is responsible for security and you will often get several answers. Facilities manages the guard contract. IT handles cyber. HR runs background checks. Finance approves the budget. Each owns a piece; nobody owns the whole.
That works until something goes wrong. Then the questions start — who approved this, who knew, who should have acted — and the answers point in different directions.
Why a named owner matters
Security risks cross departmental lines. A theft from a warehouse might involve weak access control (facilities), an employee with a concealed history (HR) and a missing alert (IT). Without one person who sees across those lines, the gaps between departments become the gaps in your security.
A named owner does not need to manage every control. Their job is to make sure each control has an owner, that risks are reviewed, and that leadership hears about problems before they become incidents.
What the role should look like
In most organisations, security ownership sits best with a senior manager who already has cross-functional authority — often operations, risk or administration. The role needs:
- Authority to require action from other departments
- A reporting line to the executive or board
- A regular review cycle — quarterly is a sensible minimum
- Access to specialist advice when the issue is beyond in-house expertise
The guard contract is not the programme
A good guard service is an important control. But a contractor delivers what the contract specifies, and the contract is only as good as the thinking behind it. Someone inside the organisation must decide what needs protecting, how, and how success is measured.
What this means in practice
- Name one senior person accountable for security across the organisation.
- Give each major control an owner by name, not by department.
- Put security on the leadership agenda at least quarterly.
- Review supplier contracts against your risks, not just your costs.
Talk to us about structuring security governance. → Bespoke security management
