Two forms of security risk in 2021

Issue 7 2021 Security Services & Risk Management

As independent security risk assessors/advisors, Alwinco has a rather solid digital footprint in the security field throughout South Africa and the rest of the world.


Andre Mundell.

Keeping that in mind, when people have been negatively impacted by crime in whichever way, whether directly or indirectly, they start to research the concept of security risk which often leads them to Alwinco.

There are two forms of security risk and can be explained as follows.

The first risk

The first type of assessment usually comes from estates, corporations and shopping centres. This is when residents, employees and staff start researching and trying to get information about the rules, concepts and what needs to be done for a security risk assessment to be conducted.

They also ask questions, especially if someone has been affected by crime. They want to know who made the decisions; they want to know who gave authorisation for the directors to make security decisions and based on what research these decisions were made.

Alwinco is often directly approached and asked if it have conducted a security risk assessment for a specific establishment.

Remember, the management portfolio of any of these entities are essentially making security decisions on behalf of their residents, employees and staff and they often want to know what experience and knowledge these people have.

The company has also had requests, where three or four families pull together after someone in their family has been affected by crime at the workplace or in their estate, to conduct a full security risk assessment on the company or estate to establish if the directors made the right security decisions.

The main problem is that most residents, employees and staff do not understand the decisions that were made and to add fuel to the fire, there is usually poor communication when it comes to security.

People tend to think that security only entails the selling and installing of security hardware. They forget that security is more about knowledge and information.

Alwinco is often asked, if a director of an estate, business or the owner of a mall, can be held responsible for the decisions that they make regarding security. While the company does not have all the information and the details pertaining to certain incidents, it does know that people are upset and they want answers.

Communication is critical

I believe that the main reason for the anger and frustration can be blamed on the lack of communication about security aspects throughout the entire structure. A lack of communication is the sole reason for the lack of understanding. Not understanding a concept or aspect, especially when it comes to security, causes frustration and anger. It is a rather vicious circle.

Trust is another aspect that is under attack if communication is unclear or non-existent. If employees, residents or staff members do not trust the people who make security decisions on their behalf, you can be sure that it is a recipe for disaster.

Alwinco also deals with children and family of elderly parents living in estates who are concerned for their safety because of the severe lack of security in and around the estate. You need to remember that people are far more informed than they used to be. Information is available everywhere, articles in magazines, on the Internet and so on.

Knowledge is indeed power. Knowing what a security structure should look like and what it should do gives people the power to question the decision-makers. The sad thing is that when people come Alwinco for advice, the first thing the company often says is that they should speak to the board of directors or the body corporate, but the answer is almost always the same: “they are unapproachable”.

When people start asking uncomfortable questions about security, the decision-makers often give them a million answers and sometimes even excuses. Nobody knows what the true answers are. Sometimes they refer the people to the security companies to ask them all the questions.

This is not the best option as people who are already upset and confused want answers, they do not want to be sent around from one person to another.

People want to know who made the decisions, what authority do they have to make these decisions? Was any research conducted to base these decisions on? Were the decisions only based on the price, or was there expert advice given? How did they get to the decisions? Who decided that one security person was better than the next?

Value of a human life

We like to think that one cannot put a price on the value of a human life. I beg to differ. I can show you hundreds of documents where CEOs, boards of directors and body corporates did put a price on a life. Some lives are apparently not even worth R5.

When you look at it from this perspective, you realise why people are up in arms about the security component in their living or working environment and on the flip side of this coin, it makes sense why there is so much crime. We are allowing it.

This is harsh, I know, but the truth is that crime is harsh too. Crime does not care, crime has no conscience and crime has no respect. We cannot go ahead and sugar-coat the truth when we know the devastation crime causes. It ruins lives.

The saddest part is that most crimes can be averted if the security risks are identified and eliminated.

As a security risk assessor by profession and through passion, I do not have all the answers, but I can say that there will be a lot fewer crime-related issues if humanity start holding the decision-makers accountable for the security decisions they make on behalf of other people. Especially if these decisions are not based on facts and proper research.

The second risk

The second problem that is surfacing is when people contact Alwinco via email to request a proposal for a security risk assessment, mostly for estates. In this request for a proposal, they will also ask me for a list of properties that I have assessed.

I understand that companies need to do due diligence and it might sound like it is surely great for promoting the company’s business, but the truth is that this is a huge risk. Giving the company’s client’s details to anyone who asks for it creates a tremendous security risk.

Since I received so many requests for quotations and my client lists, I thought that I would give it a try. I sent an email to several companies telling them that I need security advice and if they could provide me a proposal and a list of their clients as references, past and present.

Surely enough, in the blink of an eye, I received proposals with their client lists attached. They sent it to me without asking one single question to establish my authenticity. How do they know I am who I say I am and how do they know I will use the information for reference purposes only? This is a rather serious matter.

Now, when someone approaches Alwinco and asks for a proposal, the company needs to make sure that the people who are requesting this have the necessary authority to do so. This saves it a lot of time and effort as it has done multiple proposals that take a lot of time, just to never hear from the people who requested it ever again.

The company also sends an entire list of questions before starting with the proposal. This gives it a lot of necessary information about the person/company/estate requesting the proposal. The information gathered from these questions also assists its grid system to calculate the price for the assessment.

To summarise, on one side it have employees, residents, staff who are angry, upset, confused and frustrated with the decisions that were made on their behalf and on the other side, it has potential criminals looking for information from unsuspecting and sometimes uninformed security companies or security consultancies to find their next targets.

If you think about it, I have several people’s information and I know that a certain company conducted a security installation for them. I can easily call them, tell them that I am doing a follow-up on the security work that was conducted and just like that, I have access to the property. If it is this easy for me, a law-abiding citizen, how easy will it be for a criminal?

This is the danger of sharing customer details. We have spoken about this before in several articles, including ‘Loose lips sink ships’ and whilst this information is out there, people are still not paying attention to it.

Be careful of the decisions you make, especially when it entails other people’s lives. Make sure that the decisions you make are based on validated, well-researched information and that you have the necessary backing when people ask questions.

To the suppliers, security, assessors and contractors out there, I urge you to be careful to whom you give your client information. Do not just share it with anyone who asks. Both of these risks discussed in this article have detrimental consequences if caution is not taken.


Credit(s)




Share this article:
Share via emailShare via LinkedInPrint this page



Further reading:

“This Is Theft!” SASA slams Mafoko Security
News & Events Security Services & Risk Management Associations
The Security Association of South Africa (SASA) has issued a stark warning that the long-running Mafoko Security Patrols scandal is no longer an isolated case of employer misconduct, but evidence of a systemic failure in South Africa’s regulatory and governance structures.

Read more...
Making a mesh for security
Information Security Security Services & Risk Management
Credential-based attacks have reached epidemic levels. For African CISOs in particular, the message is clear: identity is now the perimeter, and defences must reflect that reality with coherence and context.

Read more...
Privacy by design or by accident
Security Services & Risk Management Infrastructure
Africa’s data future depends on getting it right at the start. If privacy controls do not withstand real-world conditions, such as unstable power, fragile last-mile connectivity, shared devices, and decentralised branch environments, then privacy exists only on paper.

Read more...
From friction to trust
Information Security Security Services & Risk Management Financial (Industry)
Historically, fraud prevention has been viewed as a trade-off between robust security and a seamless customer journey, with security often prevailing. However, this can impair business functionality or complicate the customer journey with multiple logins and authentication steps.

Read more...
Security ready to move out of the basement
AI & Data Analytics Security Services & Risk Management
Panaseer believes that in 2026, a board member at a major corporation will lose their job amid rising breaches and legal scrutiny, as organisations recognise that cyber risk is a business risk that CISOs cannot shoulder alone.

Read more...
Cyber remains top business risk, but AI fastest riser at #2
News & Events Security Services & Risk Management
The Allianz Risk Barometer 2026 ranks cybersecurity, especially ransomware attacks, as the #1 risk, while AI is the biggest riser and jumps from #10 to #2, highlighting the emerging risks for companies in almost all industry sectors.

Read more...
OT calculator to align cyber investments with business goals
Industrial (Industry) Information Security Security Services & Risk Management
The OT Calculator has been developed specifically for industrial organisations to assess the potential costs of insufficient operational technology (OT) security. By offering detailed financial forecasts, the calculator empowers senior management to make well-informed decisions.

Read more...
From digital transformation to digital sovereignty
Security Services & Risk Management IoT & Automation
As cyberthreats grow, data regulations tighten, and AI becomes central to economic competitiveness, countries are recognising the need to control and protect their own digital assets.

Read more...
The age of Lean 4.0: Orchestrating intelligence and efficiency
Security Services & Risk Management
The convergence of Lean principles and AI (what we now call Lean 4.0) is no longer a theoretical exercise; it is the defining operational paradigm for survival and growth in a complex, data-intensive economy.

Read more...
Risks of open-source intelligence escalating in crime
Security Services & Risk Management Residential Estate (Industry) Smart Home Automation
CMS estimates that open-source intelligence has played a role in 20 - 30% of robberies over the past 12 months. In cybercrime, global research consistently shows that many offences rely on some form of open-source data exploitation.

Read more...










While every effort has been made to ensure the accuracy of the information contained herein, the publisher and its agents cannot be held responsible for any errors contained, or any loss incurred as a result. Articles published do not necessarily reflect the views of the publishers. The editor reserves the right to alter or cut copy. Articles submitted are deemed to have been cleared for publication. Advertisements and company contact details are published as provided by the advertiser. Technews Publishing (Pty) Ltd cannot be held responsible for the accuracy or veracity of supplied material.




© Technews Publishing (Pty) Ltd. | All Rights Reserved.