SECURITY PROFESSIONAL MANAGEMENT (SPM)

This domain addresses topics such as management, leadership, and decision-making within the security field, highlighting the importance of defining effective strategies at the business, corporate, and international levels. Both the external and internal environments (resources, capabilities, and competitiveness) are evaluated, with emphasis on building organizations capable of executing sound strategies through proper operations management and the promotion of a strong corporate culture. The content is complemented by an analysis of key measures and metrics, along with an annex of security standards.

This module focuses on the preparation and coordination of responses to critical situations, covering comprehensive crisis management, emergency response, and business continuity, as well as the overall handling of events. It also delves into specific planning to ensure business continuity, emergency preparedness, and crisis management, including strategies for particular types of incidents. The content is complemented by informational annexes addressing emergencies related to labor strikes, general information on explosives, and issues connected to terrorism.

This domain covers the organization and execution of security operations, emphasizing staff training, formalizing service contracts, and using specialized consultants as protective resources. It also focuses on executive protection and on promoting strong security awareness, complemented by strategies to address substance abuse and prevent workplace violence.

This domain integrates risk management concepts with the essential functions of physical security, covering everything from planning and executing security assessments to measuring their effectiveness through specific metrics. It explores fundamental design concepts and influencing factors, while delving into security architecture and engineering, integrated strategies, structural measures, and crime prevention through environmental design. The content also includes an analysis of electronic security systems and highlights the importance of human resources in the sector. It extends to project management (ranging from principles, design, and system implementation to monitoring and support activities) and is complemented by annexes that define key terms and address specific considerations for high-rise buildings.

This domain presents a comprehensive approach to managing investigations by applying the PDCA cycle. It covers a wide range of practices, from undercover investigations to due diligence and pre-employment screenings. In addition, it explores conducting interviews, collecting and analyzing evidence, and preparing testimonies, culminating in strategies designed to maximize the effectiveness of the investigative process.

This domain encompasses enterprise risk management, the protection of physical and information assets, and the prevention of workplace theft and fraud. It also examines loss reporting and profitability, while addressing essential ethical, legal, and business considerations. In addition, it explores critical areas such as crisis management, investigations, personnel management, and the implementation of physical security measures, while also analyzing global trends and supply chain risk management (SCRM) strategies.

This domain covers the scope definition, regulatory references, key terms related to information asset protection, and an analysis of the context in which these assets operate. It explores fundamental aspects of management, leadership, and planning, as well as the implementation of specific protective measures. In addition, it includes strategies for both competitive and counter-competitive intelligence and addresses risks associated with protecting assets outside of organizational facilities.

This domain covers the fundamental aspects that regulate professional practice, analyzing professional ethics and exploring the various sources of law that support the legal system. It then addresses civil law, which governs relationships between private parties, and criminal law, which establishes penalties for criminal conduct. Finally, it examines administrative law, which oversees and regulates security activities, providing a comprehensive view of the current regulatory framework.