To reflect the nature of the security industry and to remain flexible for constant industry change, the Geneva Forum should base its programme theme’s around three core categories. The core categories will provide a framework to manage issues and trends towards effective development of programme themes resulting in conference sessions, showcase architecture and training centre seminars.

Core Categories

• Access: physical and virtual
• Risk Management
• Incident Management

---

Access

Access is about the legal or illegal entry or penetration of borders and perimeters. Access is a core category because it provides the framework for security. Borders and perimeters can be physical: national borders; government, business or personal perimeters; container shipments and transport of goods; and movements of persons under correction, or virtual: corporate and personal IT systems; and military and government communications networks (Command, Control, Communications and Intelligence – “C3I”). Once borders or perimeters are accessed illegally, intruders with malicious intent can commit mass destruction, ruin corporate reputation, cost companies hundreds of millions, reveal sensitive information and violate rights and civil liberties.

The tactics deployed to manage access, protect assets and prevent loss are represented by the 17 segments of the security industry from computer security, surveillance, tracking and tagging and guard services.

While there may be technological and commercial solutions to protect borders and perimeters and manage access, governments and societies around the world are responding with less tolerance and a desire for more restrictions. To balance between security and rights, business, government and the individual must have a security strategy to manage the risk of unwanted access.

---

Risk Management

Risk Management is about anticipating and preventing activities that would threaten assets and incur loss. It is the process of analyzing exposure to threats and developing strategies on how best to handle such exposure.

To manage risk and ensure a secure environment, companies and governments must have management practices in place from the board down to operational level employees to protect information, infrastructure and assets.

The main challenge is to create a culture of security, one that is aware of security policies and strategies. Aware staff can serve to protect the organization’s assets. Without a security policy in place, there are no standards or enforcement.

Risk management practice means that organizations need to make sure the right people have the right access to the right systems at the right time. It is equally important to block unauthorised people.

A key element of security is identity management. This involves robust controls to make sure that the user: is who they say they are; can see only the information that is appropriate; and is set up on systems when they join, and are deleted from systems when they leave.

There are three possibilities for managing risk. Organizations or individuals can chose to accept it (do nothing approach), mitigate it (by putting countermeasures in place that prevent it from arising) or transfer it (typically through insurance). The Risk Management category is about establishing policies and strategies that anticipate and prevent threats to security.

---

Incident Management

Incident management is about employing the strategy developed after analysing and managing risk. An incident occurs when a threat has become a reality resulting in a situation to be managed. Incident Management is about having a programme or “road-map” in place to guide action towards minimizing the incident’s impact on safety, security, business and society.

Incident management is about having a programme of common doctrine and preparedness to ensure effective execution. The programme for incident management should include around five functions that include: command, operations, planning, logistics, communications and finance/administration.

The Incident Management Category is about establishing a unified programme or “road-map” that can be employed during an incident to reduce damage and loss.

The three core categories will provide a framework to design the conference programme by addressing the policy trade offs, commercial solutions and strategies in each.

REGISTRATION COST:

Corporate:
Early:	CHF 1,500.-
Late:	CHF 1,800.-
On-site:	CHF 2,000.-