People, processes and technology

March 2016 Security Services & Risk Management

I think the first thing we need to ask is what causes the crime? The obvious answer is people, specifically criminals, but it’s people at the end of the day. The focus now shifts to how, what, when, where and why?

Massimo Carelle, risk consultant, Ingram Micro.
Massimo Carelle, risk consultant, Ingram Micro.

When putting security measures in place, these questions are the foundation as to what measures to take to mitigate the chance of being robbed, hijacked, pilfered, defrauded etc. One of the biggest challenges that we face today is the brazen manner in which these crimes are being committed.

As we know, security measures to counter this kind of criminal activity comes with a price, so it is very important to ensure that correct risk analysis is done to ensure that the risks and costs are commensurate. Sadly, cost is an issue when it comes to ensuring the company’s assets are protected. All companies are chasing targets and ensuring that they remain profitable, so security generally becomes a grudge purchase.

Detailed and documented procedures are an important part of every organisation. Some of the challenges that security managers face daily is the lack of proper SOPs (standard operating procedures) or the following of procedures within the operation. A lack of SOPs and a failure to follow the processes the company has ratified creates a loophole in the system and allows people to “legitimately” get assets out using weak processes.

This means that you can build a 100 m high wall around your entire facility, but if your processes and SOPs allow for fraudulent transactions, then the wall means nothing at the end of the day. This also creates a lack of responsibilities and accountability.

The lack of proper risk management frameworks is probably the single most neglected process in most companies. As soon as they hear the word risk, they automatically think security. But, in fact, it is more of a tool to ensure that the business objectives are met, which makes it one of the company’s biggest assets. It is important for MDs, CEOs, COOs, security managers, risk managers, operations managers, warehouse managers etc. to familiarise themselves with proper risk management frameworks to ensure that all the checks and balances are there within the organisation to ensure objectives are met – which ensures profitability.

Security is only a part of this, but we generally neglect to educate ourselves on these frameworks, which is a risk in itself.

So in a nutshell, the challenges are the people interested in our assets, the people that control the finances which hinder the implementation of sound security measures due to cost, the people that don’t follow process or fail to implement them, and the people that are ignorant to the fact that a good risk management process is key to success in meeting objectives.

No surprises then, that the key to a successful security system is to focus on People, Process and Technology.

For more information contact Massimo Carelle, Ingram Micro, +27 (0)83 461 0734, massimo.carelle@ingrammicro.com





Share this article:
Share via emailShare via LinkedInPrint this page



Further reading:

Africa’s opportunity to shape the future of human-centred AI
AI & Data Analytics Security Services & Risk Management
Across the Global South, countries are not yet locked into decades of legacy AI systems, energy-intensive infrastructure, or governance frameworks designed for a different technological era. That creates something rare in technology development: a cleaner slate.

Read more...
AURA appoints Taryn Winer as global head of people
News & Events Security Services & Risk Management
Following its €13,5 million Series B funding round last year and accelerating international expansion, particularly across the United States, AURA has appointed Taryn Winer as global head of people.

Read more...
95% do not have full trust in cybersecurity vendors
Information Security Security Services & Risk Management
Trust in cybersecurity vendors is fragile, difficult to measure, and increasingly shaping risk posture at both operational and board levels. Lack of verifiable transparency undermines cybersecurity decision-making, according to Sophos-backed research.

Read more...
Understanding the Shared Responsibility Model
Infrastructure Security Services & Risk Management
While the cloud can certainly be a growth enabler in many ways, it can also introduce new security risks. Companies want to have a clear understanding of where their security duties end and where their cloud service provider’s begin.

Read more...
“This Is Theft!” SASA slams Mafoko Security
News & Events Security Services & Risk Management Associations
The Security Association of South Africa (SASA) has issued a stark warning that the long-running Mafoko Security Patrols scandal is no longer an isolated case of employer misconduct, but evidence of a systemic failure in South Africa’s regulatory and governance structures.

Read more...
Making a mesh for security
Information Security Security Services & Risk Management
Credential-based attacks have reached epidemic levels. For African CISOs in particular, the message is clear: identity is now the perimeter, and defences must reflect that reality with coherence and context.

Read more...
Privacy by design or by accident
Security Services & Risk Management Infrastructure
Africa’s data future depends on getting it right at the start. If privacy controls do not withstand real-world conditions, such as unstable power, fragile last-mile connectivity, shared devices, and decentralised branch environments, then privacy exists only on paper.

Read more...
From friction to trust
Information Security Security Services & Risk Management Financial (Industry)
Historically, fraud prevention has been viewed as a trade-off between robust security and a seamless customer journey, with security often prevailing. However, this can impair business functionality or complicate the customer journey with multiple logins and authentication steps.

Read more...
Security ready to move out of the basement
AI & Data Analytics Security Services & Risk Management
Panaseer believes that in 2026, a board member at a major corporation will lose their job amid rising breaches and legal scrutiny, as organisations recognise that cyber risk is a business risk that CISOs cannot shoulder alone.

Read more...
Cyber remains top business risk, but AI fastest riser at #2
News & Events Security Services & Risk Management
The Allianz Risk Barometer 2026 ranks cybersecurity, especially ransomware attacks, as the #1 risk, while AI is the biggest riser and jumps from #10 to #2, highlighting the emerging risks for companies in almost all industry sectors.

Read more...










While every effort has been made to ensure the accuracy of the information contained herein, the publisher and its agents cannot be held responsible for any errors contained, or any loss incurred as a result. Articles published do not necessarily reflect the views of the publishers. The editor reserves the right to alter or cut copy. Articles submitted are deemed to have been cleared for publication. Advertisements and company contact details are published as provided by the advertiser. Technews Publishing (Pty) Ltd cannot be held responsible for the accuracy or veracity of supplied material.




© Technews Publishing (Pty) Ltd. | All Rights Reserved.