People, processes and technology

March 2016 Security Services & Risk Management

I think the first thing we need to ask is what causes the crime? The obvious answer is people, specifically criminals, but it’s people at the end of the day. The focus now shifts to how, what, when, where and why?

Massimo Carelle, risk consultant, Ingram Micro.
Massimo Carelle, risk consultant, Ingram Micro.

When putting security measures in place, these questions are the foundation as to what measures to take to mitigate the chance of being robbed, hijacked, pilfered, defrauded etc. One of the biggest challenges that we face today is the brazen manner in which these crimes are being committed.

As we know, security measures to counter this kind of criminal activity comes with a price, so it is very important to ensure that correct risk analysis is done to ensure that the risks and costs are commensurate. Sadly, cost is an issue when it comes to ensuring the company’s assets are protected. All companies are chasing targets and ensuring that they remain profitable, so security generally becomes a grudge purchase.

Detailed and documented procedures are an important part of every organisation. Some of the challenges that security managers face daily is the lack of proper SOPs (standard operating procedures) or the following of procedures within the operation. A lack of SOPs and a failure to follow the processes the company has ratified creates a loophole in the system and allows people to “legitimately” get assets out using weak processes.

This means that you can build a 100 m high wall around your entire facility, but if your processes and SOPs allow for fraudulent transactions, then the wall means nothing at the end of the day. This also creates a lack of responsibilities and accountability.

The lack of proper risk management frameworks is probably the single most neglected process in most companies. As soon as they hear the word risk, they automatically think security. But, in fact, it is more of a tool to ensure that the business objectives are met, which makes it one of the company’s biggest assets. It is important for MDs, CEOs, COOs, security managers, risk managers, operations managers, warehouse managers etc. to familiarise themselves with proper risk management frameworks to ensure that all the checks and balances are there within the organisation to ensure objectives are met – which ensures profitability.

Security is only a part of this, but we generally neglect to educate ourselves on these frameworks, which is a risk in itself.

So in a nutshell, the challenges are the people interested in our assets, the people that control the finances which hinder the implementation of sound security measures due to cost, the people that don’t follow process or fail to implement them, and the people that are ignorant to the fact that a good risk management process is key to success in meeting objectives.

No surprises then, that the key to a successful security system is to focus on People, Process and Technology.

For more information contact Massimo Carelle, Ingram Micro, +27 (0)83 461 0734, [email protected]





Share this article:
Share via emailShare via LinkedInPrint this page



Further reading:

Visualise and mitigate cyber risks
Security Services & Risk Management
SecurityHQ announced its risk and incident management capabilities for the SHQ response platform. The SHQ Response Platform acts as the emergency room, and the risk centre provides the wellness hub for all cyber security monitoring and actions.

Read more...
Eighty percent of fraud fighters expect to deploy GenAI by 2025
Security Services & Risk Management
A global survey of anti-fraud pros by the ACFE and SAS reveals incredible GenAI enthusiasm, according to the latest anti-fraud tech study by the Association of Certified Fraud Examiners (ACFE) and SAS, but past benchmarking studies suggest a more challenging reality.

Read more...
Deception technology crucial to unmasking data theft
Information Security Security Services & Risk Management
The ‘silent theft’ of data is an increasingly prevalent cyber threat to businesses, driving the ongoing leakage of personal information in the public domain through undetected attacks that cannot even be policed by data privacy legislation.

Read more...
Data security and privacy in global mobility
Security Services & Risk Management Information Security
Data security and privacy in today’s interconnected world is of paramount importance. In the realm of global mobility, where individuals and organisations traverse borders for various reasons, safeguarding sensitive information becomes an even more critical imperative.

Read more...
Proactive strategies against payment fraud
Financial (Industry) Security Services & Risk Management
Amid a spate of high-profile payment fraud cases in South Africa, the need for robust fraud payment prevention measures has never been more apparent, says Ryan Mer, CEO of eftsure Africa.

Read more...
How to prevent and survive fires
Fire & Safety Security Services & Risk Management
Since its launch in August 2023, Fidelity SecureFire, a division of the Fidelity Services Group, has been making significant strides in revolutionising fire response services in South Africa.

Read more...
A long career in mining security
Technews Publishing Editor's Choice Security Services & Risk Management Mining (Industry)
Nash Lutchman recently retired from a security and law enforcement career, initially as a police officer, and for the past 16 years as a leader of risk and security operations in the mining industry.

Read more...
Risk management: There's an app for that
Editor's Choice News & Events Security Services & Risk Management
Zulu Consulting has streamlined the corporate risk management process with the launch of Risk-IO, a web-based app designed to consolidate and guide risk managers through the process, monitoring progress as one proceeds.

Read more...
Integrated information platform for risk management
Editor's Choice News & Events Security Services & Risk Management
Online Intelligence recently launched version 7 of its CiiMS risk and security platform. Speaking to SMART Security Solutions after the launch event, the company’s Arnold van den Bout described the enhancements in version 7.

Read more...
Global Identity Fraud Report revealing eight-month ‘mega-attack’
Editor's Choice Security Services & Risk Management
AU10TIX recently released its Q4 Global Identity Fraud Report, with the research identifying two never-before-seen attack patterns, with the worst case involving 22 000+ AI-generated variations of a single U.S. passport.

Read more...