This paper discusses the issue of security. Building on a conceptualization of security as organizational phenomenon, drawing on theories of routines and practice theoretical understandings of organization, this paper presents how security in organizational practice can be understood. Preliminary findings are discussed to suggest how security can exist both in an organization in the guise of policy and in practice. Particularly challenges in managing security are elucidated.