The Chief Security Office (CSO) is a fully global team, with colleagues across Europe, Asia and the Americas. We support the business in ensuring confidentiality, integrity and availability of the firm’s information assets, and in implementing world-class security solutions to meet business needs. 

CSO operates critical controls and works in partnership with the business to ensure our customers can trust Barclays to protect their sensitive information, and that the security of our critical infrastructure, staff, and assets is maintained.

This is delivered through 5 key services:

• Security Assurance
• Identity and Access Management
• Physical Security
• Security Operations
• Resilience

Security Assurance

Security Assurance is about making sure that all the technology that underpins the bank’s technology platform is secure. Secure by design, based on trusted components, and that we have the right tools and security technologies to protect the bank from security threats that face Financial Services organisation.

Identity and Access Management

The role of Identity and Access Management is to ensure all Barclays employees have the right level of access to perform their role in a secure and controlled manner. This is achieved through our portfolio service offerings, which includes end user technology tool sets and frameworks, as well as control module services to ensure we have the right level of governance in place to operate our controls.

Physical Security

Physical Security is the protection of our people – both colleagues and customers; our premises – so all our buildings and our branches; and our assets against the physical threat of crime, terrorism, protest activity, and geo-political instability – particularly when our colleagues are travelling.

Security Operations

Security Operations is the delivery of front line security intelligence, security monitoring, security incident response, and security education at the Chief Security Office (CSO). The Security Operations service is delivered by multiple teams here in CSO, including: Intelligence, Cyber Operations, Group Investigations, the Joint Operations Centre, and the CSO Education and Outreach team - all working together to deliver a seamless front-line security function.

Resilience

Resilience is the ability to survive a disruptive event. And really what we’re trying to do at Barclays is to make sure that rather than wait for that event to happen, and then scramble around and recover quickly, is to make sure that we minimise the impact of that event in the first place by being resilient to that failure.