Six Sigma, The Scientific Method and Plan, Do, Check, Act (PDCA) within Security & Risk Management: Science vs. Art Form

Security and risk management sciences are processes which can be subjected to analytical rigour, structured planning, empirical evaluation and other scientific methods.

That is, not only is there an underlying body of knowledge, empirically proven application and parameters for efficacy, but there is also a formal process for evaluation, design, implementation and revision.

Plan, Do, Check, Act (PDCA) is another simplified form of the process.

Six Sigma is another derivative of the scientific method used within security and risk management.

In short, professional, predictable and more reliable processes employ some form of procedural rigour, measurement, reflection and continuous improvement.

As a result, these procedure and performance processes should be documented in, or at least referenced within, all systematic security and risk management frameworks.

If not, the process is more likely akin to individual preference, influence, bias and dilution of security or risk management as a professional vocation, discipline or science.

Therefore, always look for the process and method that informs and guides security and/or risk management as it is typically a signifier of professional or non-professional practices.

In sum, the lack of professional, academic or scientific rigour within any security and/or risk management system is more likely a form or localised and community art form than a professional vocation, discipline or scientific endeavour.

Legitimate processes can be analysed, designs evaluated and results assessed.

Guesswork, random or ad-hoc construction and anecdotal/individual practices... less so.

Moreover, informal and unverified security and/or risk management practices within a site, department or organisation is prone to significant deviance and unpredictable variance on returns, safety, security, risk mitigation and protection.

Not surprisingly, stakeholders, shareholders, courts and communities have become less tolerant of security and. risk art forms...despite the widespread and popular practice of security and risk alchemy as opposed to security and risk sciences.

Tony Ridley, MSc CSyP MSyI M.ISRM

Security, Risk & Management Sciences