classic | mobile
Follow us on:
Follow us on Facebook  Share via Twitter  Share via LinkedIn
 

Search...
Hi-Tech Security Solutions Business Directory
Residential Estate Security Handbook 2017


Risky assessments
July 2012, Security Services & Risk Management

The risk assessment is a nebulous concept in our security industry. While it should be a process of discovering security vulnerabilities in your home or business and developing a plan to deal with them, it is more often than not simply seen a sales opportunity by security service providers.

The reason for this is that most people approach a security company and ask them to come in and tell them what they need. Andre Mundell, a director at Alwinco says this is the wrong approach.

“A security company will develop a risk assessment based on the products and services it sells,” says Mundell. “Hence the result is often more of a selection of what it sells, such as an alarm, PIRs and armed response services that are supplied without an SLA (service-level agreement), than a true analysis of what the client needs.”

Often, the result cost of the assessment is also tailored to what the security operator thinks the client can afford. A middle-class home will deal with the costs of installing an alarm and PIRs, but will generally not be keen to have cameras installed. In addition, the client will probably not know what options are available when it comes to an alarm and will let the security operator put in an alarm system it prefers.

Mundell says the solution recommended should ensure the client remains in control and not only the security service provider. “For example, an alarm system that sends an SMS message directly to the client as well as notifying the armed response unit is far more effective as it allows the client to warn his family or employees about the danger immediately. It should be a standard part of any alarm system, but is rarely recommended.”

Independent assessments

“When opting for an independent risk assessment, the client can be assured that the assessor has no financial stake in the final solution,” notes Mundell. “His job is to develop a solution that will secure the client, taking all the vulnerabilities in his environment into account.”

Once completed, the client can then choose to implement the complete plan, or, on his own responsibility, only implement part of the plan. In many instances, clients balk at the cost of a complete solution and are prepared to allow some vulnerabilities they consider less risky, while dealing with the more dangerous ones.

A proper risk assessment also guides the client in building a reliable security platform that can be expanded as required without creating more expense when certain elements of a standard security installation turn out to be incompatible with new additions. There is no reason a well-designed security plan should not allow for expansion and new products to be added over time. In fact, Mundell says the risk assessment should ensure that the client can adapt to changes in the security environment with ease.

Get what you need, not what you are given

Once the assessment is completed, the client should then approach the security service provider with a plan of what she wants. This leaves the client secure in the knowledge that the plan will actually deliver the security benefits required, not what a service provider wants to do with the products that happen to be in the storeroom.

From the security service provider’s perspective, Mundell says a proper, independent risk assessment will actually provide more income over time. Done properly the assessment will almost always recommend more than the standard installations these companies provide. And if the platform is installed correctly, the client can expand the services implemented over time.

“Perhaps the problem lies in the fact that security companies continually push their sales people to sell, looking for new clients and increased revenues,” says Mundell. “This leaves little time for ensuring each client gets a security installation that meets their needs; in fact it leaves no time to accurately understand what the client wants.

“It is also a result of clients not knowing what threats and solutions are out there, putting their trust in their service provider in the incorrect assumption that the operator will install a solution designed to solve her particular security problem.”

An independent risk assessor must focus on each client, providing solutions they need in their environment because that is their livelihood. If they are truly independent, they make no money from the products and services provided, only from ensuring their clients have a comprehensive risk assessment and security plan that works.

Says Mundell, “A security risk assessment is a realistic, thorough and intelligent approach to security as a preventative measure against crime. It gives a comprehensive mechanism that ultimately gives clients the compass of what they are up against in terms of security risk.”

In future issues, Alwinco will discuss the various aspects to include in a comprehensive risk assessment.


  Share via Twitter   Share via LinkedIn      

Further reading:

  • Awareness and trust in context
    November 2017, CA Southern Africa, Access Control & Identity Management, Security Services & Risk Management
    Markus Krauss, senior director, Digital Identity and Security, CA Technologies, spoke to Hi-Tech Security Solutions about making identity work for people and things.
  • The access edge
    November 2017, Johnson Controls, This Week's Editor's Pick, Access Control & Identity Management, Integrated Solutions, Security Services & Risk Management
    With the common denominator of IP networks as their backbone, building automation, security and, in particular, access control systems are increasingly providing opportunities to both security integrators and building managers.
  • Key management in 2018
    November 2017, Zonke Monitoring Systems, Access Control & Identity Management, Security Services & Risk Management
    With all the technology available today, you would think we were past using old-fashioned keys for security, but far from it.
  • Why own when you can rent?
    November 2017, EOH Security & Building Technologies, Access Control & Identity Management, Security Services & Risk Management
    In a rapid changing environment, business is moving away from owning security equipment to a model of serviced rentals.
  • Minimising maintenance
    November 2017, Naxian Systems, Security Services & Risk Management
    ANNIE (Artificial Neural Network Inside Everything) applies learning to proactively minimise maintenance.
  • Open source intelligence
    November 2017, Security Services & Risk Management
    OSINT has been traditionally used, in conjunction with other forms of information, to support a wide variety of both covert and overt due diligence, security, consumer and commercial intelligence related investigations.
  • Legal protection for data?
    November 2017, Security Services & Risk Management
    The ‘masterdeeds’ data breach of over 30 million people’s personal records has been cited as South Africa’s worst-ever data breach.
  • 24/7 acquires SMC
    November 2017, 247 Security Group, News, Security Services & Risk Management
    24/7 Security Services has acquired Security Management Consultants (SMC) and formed a new division focusing on estates and schools, which SMC’s Brian Sharkey will head.
  • Protect your personal information
    November 2017, This Week's Editor's Pick, News, Security Services & Risk Management
    SABRIC encourages consumers to protect their personal information by sharing it very selectively and on a need to know basis only.
  • Disaster recovery as a service?
    November 2017, Commvault, This Week's Editor's Pick, Security Services & Risk Management
    Johan Scheepers looks at the implications of the emergence as well as the benefits of disaster recovery as a service (DRaaS).
  • SA manufacturing companies take note
    November 2017, Dimension Data, Cyber Security, Security Services & Risk Management
    South Africa’s manufacturing sector is under growing threat of cyber attack, says Sean Duffy, executive of security solutions for MEA at Dimension Data.
  • Availability in the age of security risk
    November 2017, This Week's Editor's Pick, Security Services & Risk Management
    Enterprises are spending millions on disaster recovery (DR) and business continuity (BC) strategies but they do not invoke them nearly enough for the investment to be measured.

 
 
         
Contact:
Technews Publishing (Pty) Ltd
1st Floor, Stabilitas House
265 Kent Ave, Randburg, 2194
South Africa
Publications by Technews
Dataweek Electronics & Communications Technology
Electronic Buyers Guide (EBG)

Hi-Tech Security Solutions
Hi-Tech Security Business Directory (HSBD)

Motion Control in Southern Africa
Motion Control Buyers’ Guide (MCBG)

South African Instrumentation & Control
South African Instrumentation & Control Buyers’ Guide (IBG)
Other
Terms & conditions of use, including privacy policy
PAIA Manual
         
    Mobile | Classic

Copyright © Technews Publishing (Pty) Ltd. All rights reserved.