Somewhere in your hospital’s leadership, someone has asked whether a hospital needs a director of security, and the conversation probably ended with a shrug and a look at the budget. You have a guard contract. You have cameras. You have a workplace violence policy that HR updated last year, and you have passed your surveys. Adding an executive salary for a function that appears to be working feels hard to defend to a finance committee that is already being asked to fund nursing, equipment, and a new electronic record.
I understand that reasoning, and I have sat across from administrators who made it in good faith. My answer, after a career in law enforcement, fire service, private security, and federal government, is that the question is being asked the wrong way around. A hospital does not need a director of security because the title looks good on an org chart. It needs one because a hospital is one of the most exposed environments in any community, and exposure of that size needs an owner. The real question is what kind of owner, and how much of one, your hospital can afford right now.
What Makes a Hospital Different
Most organizations can lock the front door. A hospital cannot. It is an open campus by design, with dozens of entrances, public corridors, an emergency department that must accept anyone at any hour, and a constant flow of visitors who are frightened, grieving, intoxicated, or angry. Inside that campus are behavioral health patients in crisis, newborns on a maternity unit, controlled substances in a pharmacy and on every floor, and a workforce that is assaulted at a rate most industries would consider a crisis. Parking structures sit at the edge of the property where staff walk alone at the end of a night shift.
No single department can see all of that, and no guard contract is written to manage it. The contracted officers do the job in front of them. The nurses handle what comes through the door. Each group is competent inside its lane, and the risk lives between the lanes. That is the structural argument for a director. Someone has to be responsible for the whole picture, and that someone has to have the authority to change how departments operate.
Does a Hospital Need a Director of Security or Just Better Guards
Administrators often respond to an incident by asking the vendor for more officers or a better supervisor. That can help at the specific post where the incident occurred, and it changes nothing about the program. A guard supervisor manages shifts and coverage. A director decides what the program is supposed to accomplish, where the hospital’s real exposure sits, which protocols exist and which are missing, how the ED, behavioral health, pharmacy, and the maternity unit should be protected differently, and how the whole thing gets tested. Adding officers without that leadership is like adding nurses to a unit with no medical director. You get more people doing what they were already doing.
There is also the matter of who the vendor answers to. In most hospitals the contract sits with facilities, and the vendor is evaluated on filled posts and cost. A director evaluates the vendor on whether officers are trained for a healthcare setting, whether post orders match the hospital’s actual risk, whether incident reports are complete and read by someone, and whether the officers on the night shift know what to do when a patient in crisis becomes violent in a hallway. That is a different relationship, and it only exists when someone with authority owns it.
What the Role Actually Changes
When a director arrives in a hospital that has never had one, the first change is visibility. Incident data that was scattered across the ED, HR, the guard log, pharmacy, and the parking operator gets pulled into one place, and patterns appear that no single department could see. The second change is standards. Visitor management stops being a set of local habits and becomes a policy that is the same at every entrance. Infant security is drilled without notice rather than reviewed on paper. Behavioral health escorts follow a protocol the officers have practiced. The pharmacy’s after-hours access list gets audited by someone who does not work in pharmacy.
The third change is the one that matters to the board and to the surveyor. Accreditation and regulatory expectations for workplace violence prevention assume a program with an owner, an assessment, training, and review. A director is the person who can walk into a survey and describe the program from memory, produce the evidence, and explain what changed after the last incident. Without that person, the hospital is assembling its answer in the weeks before the visit, and the assembled answer is rarely the truth.
Security Should Be Tested, Not Assumed
The doctrine I wrote Until Tested: Security Is Only Assumed around applies to hospitals more than to any other setting I know. The maternity unit assumes the doors lock when the infant tag alarm trips. The ED assumes the panic button reaches the officer. The pharmacy assumes the access log is accurate. Facilities assumes the vendor is following the post orders. Each assumption is reasonable, and each one is untested until someone deliberately tries it. A director spends part of every month doing exactly that: pulling on doors, watching the officer post at shift change, tripping the infant alarm at two in the morning, and running a tabletop with the charge nurses who would actually have to respond. In my experience this is where the failures are found, and it almost never happens in a hospital that has no director.
How to Decide for Your Hospital
Begin with an honest look at your exposure. If your emergency department sees high volumes of behavioral health or intoxicated patients, if your campus has more entrances than anyone can name, if your staff have reported assaults that never reached leadership, or if your last survey raised questions about workplace violence prevention, you already have the answer. Then ask who currently owns the program and whether that person has the authority and the time to run it. If the answer is a facilities director who is also managing construction, or an HR leader who is also managing benefits enrollment, you do not have an owner.
Next, decide how much of a director you need. A large academic center will need a full-time executive with staff. A community hospital or a small system may need a fraction of one: an experienced security executive who spends a set number of days each month owning the program, directing the vendor, testing the controls, and reporting to the COO and the board. Either way, write the role down, give it a reporting line above facilities, and give it the authority to change how departments operate. A director without authority is a consultant with a badge.
Go Deeper
For hospitals that recognize the need and cannot yet fund a full-time executive, the fractional model is the practical answer, and I explain it in What Is a Fractional Security Director? The Complete Guide. My book Fractional Security Director makes the full case for closing the leadership gap with a part-time executive who owns the program and answers to leadership.
Commissioner William Epps is a former elected Fire Commissioner, federal law-enforcement supervisor, and firefighter since 2006, with instructor credentials in Hazardous Materials response, Active Shooter preparedness, and Stop the Bleed®. He spent seven years in federal law enforcement in physical security, executive protection, and incident command, and now serves organizations as a Fractional Security Director. He is the author of The Spirit of Saul, The Spirit of Pharaoh, and other practical books on security, leadership, and faith, built around one idea: knowledge should be practical enough to use when it matters.
Leave a Reply