printer friendly version

Instant security?

The most common mistake I encounter with clients is them jumping to a particular solution. They want me to develop and implement that solution (CCTV, card access, alarm products, audit procedures etc.) instead of defining their problem and going through a functional design process. It is amazing how much money they waste without solving the problem before I can get them to stop and answer my questions.

The other day I sat in a security meeting of a large corporate company with all the managers present in the meeting, and again I realised that people in South Africa do not understand security. The impression is still that security is perceived the same as going to the store and buying a soda or a plug-in alarm system. Companies do not do proper planning in regards to security.

This company had very poor security and as I tried explaining the concept of security risk assessment to them, I realised that their time-line was far too short. The more I tried to explain to them the importance of having their security assessed to determine all the vulnerabilities, of which they had plenty, the importance of checking all aspects of their security, that only after the assessment and understanding their unique working circumstances, a proper security plan could be established, they were only interested in a quick, instant solution. The final security plan must then ultimately put their management in charge of the security. Eventually the meeting was dismissed, but I still do not think that they really understood what I was explaining to them.

They still have the mindset that security is the last item on the agenda, so it is not very important, and that you do not spend a lot of money on security. They still give the impression that they see security as just a guard with a baton and a dog.

Keeping in mind that I was sitting in a boardroom of this large corporate entity surrounded by managers, the questions these managers were asking me clearly showed that they never give their company’s security much thought. That they were still looking for an instant solution after I explained security risk assessment to them in detail was very disconcerting. This also proved that the security of their company as well as many other corporate companies in South Africa is in a very poor state. Security is never on the top of their priority lists and hence not given much thought.

Below I have compiled a list of common mistakes companies make with regards to security.

Common mistakes made in security

* Security based on guesses.

* Do not have time for security.

* Not informed about the best ways to secure their property.

* Not in control before or after criminal attack.

* Security system that is always too small (too little capacity).

* No security plans for the future.

* Never make sure that all security providers are PSIRA registered.

* No training (employees and security officers).

* Never having conducted an independent security risk assessment.

* Always employing the lowest bidder to provide security services.

* Not having a proper security budget.

* Most organisations view their physical security measures as an expense, not an asset.

* Physical security is viewed as a secondary concern compared with information system security.

* Do not read a security risk proposal completely.

* The person reading the proposal does not understand the purpose of the assessment and the final goal that is to be achieved.

* Allowing friends or family members to do the security installations/arrangements.

* Security based only on one leg (desire/opportunity/ability).

* Thinking because it worked in the past and that is how we will continue to do it.

* Copy security plans of one property to implement at other properties.

* Ignoring the most important step in the security process, such as having an independent security risk assessment done.

“Currently wisdom comes from disaster.” This perfectly illustrates the attitude of most South Africans towards the security of their business and homes. It should not take a nasty crime incident, resulting in huge financial loss, or even worse, before we wake up to reality.

Share this article:

Further reading: