An experienced security consultant shares what she has learned as a corporate security executive and as the CEO of a consulting group.