More secure governing

July 2016 Security Services & Risk Management

Although governmental buildings and offices, particularly those made accessible to the public, have access control, most of these properties do not otherwise have effective overall security. It is very easy once you have come in at the main entrance to go anywhere inside the building. As it often occurs, health & safety and security are confused and thought about as being the same thing. The reality is that they are not. They can be at the opposite ends of the spectrum at times. These buildings have an OHS report. None of them have their security risk assessment documentation in hand.

To my understanding, governmental properties usually make use of the tender process to procure security services, installations, and upgrades. I have no qualms against this method, but would like to suggest an improvement to enrich this process. This will ensure that the correct security action is taken from the very beginning.

I have always wondered how the specs of the tender are derived. A vast majority of governing boards that I have encountered do not always have an individual onboard with the necessary security knowledge or background. This makes it even harder for them to make the correct decisions in choosing the best security solutions. Tender applications usually consist of only a spec sheet and the price. If you are not familiar with the product or security in general; it could be very confusing.

Most of the time, the end-user doesn’t even understand what all the listed specs mean or what the actual functionality of the product is. It is only after money has been spent and the installation has been completed that many people find that their security is inefficient, incorrect or just not enough. A good security system consists of multiple facets that are interconnected and that complement each other.

Improvements for security tenders

There are two ways in which to approach these improvements. The first is for the governing board to contract an independent security risk consultant to assess their properties. All risks in regards to their physical security will be identified and explained. This will give them a definite guideline of what to request in the tender. They will also be able to judge all applicants on the same standard. Security will be based on a strong, solid foundation.

Additionally, the independent assessor will be able to help them by reviewing and explaining the recommendations made by applicants. He will be able to weed out the best solutions from the lot and to advise the board what will work for their unique secur-ity situation. The security risk assessment will also grant better budget planning. Security costs will be stabilised and can be spread out in phases over time. It is also not uncommon for the board to increase the initial security budget. This is because they now understand the risk. They will see why certain measures, upgrades, and installations are needed.

Experience has also shown that the good, professional security companies that you actually need do not always compete in the tender process. More often than not you are sitting with a handful of small companies that are not always able to provide a good service or handle a big contract. The assessor can approach the best companies on behalf of the governing body and invite them to tender for the project. As part of the assessment, the independent consultant would have already conferred with those offering the best solutions. He will thus be able to indicate to the board who the cream of the crop is.

The second method is to ask all tender applicants to hand in their own security risk assessment report with their applications. This will allow the board to see how the solutions were derived and if all the risk will effectively be addressed. It will show that the security company has done its homework and that the recommendations are not just founded on guesswork. This second method may be the better solution.

For more information contact Alwinco, +27 (0)62 341 3419, andre@alwinco.co.za, www.alwinco.co.za



Credit(s)




Share this article:
Share via emailShare via LinkedInPrint this page



Further reading:

Making a mesh for security
Information Security Security Services & Risk Management
Credential-based attacks have reached epidemic levels. For African CISOs in particular, the message is clear: identity is now the perimeter, and defences must reflect that reality with coherence and context.

Read more...
Privacy by design or by accident
Security Services & Risk Management Infrastructure
Africa’s data future depends on getting it right at the start. If privacy controls do not withstand real-world conditions, such as unstable power, fragile last-mile connectivity, shared devices, and decentralised branch environments, then privacy exists only on paper.

Read more...
From friction to trust
Information Security Security Services & Risk Management Financial (Industry)
Historically, fraud prevention has been viewed as a trade-off between robust security and a seamless customer journey, with security often prevailing. However, this can impair business functionality or complicate the customer journey with multiple logins and authentication steps.

Read more...
Security ready to move out of the basement
AI & Data Analytics Security Services & Risk Management
Panaseer believes that in 2026, a board member at a major corporation will lose their job amid rising breaches and legal scrutiny, as organisations recognise that cyber risk is a business risk that CISOs cannot shoulder alone.

Read more...
Cyber remains top business risk, but AI fastest riser at #2
News & Events Security Services & Risk Management
The Allianz Risk Barometer 2026 ranks cybersecurity, especially ransomware attacks, as the #1 risk, while AI is the biggest riser and jumps from #10 to #2, highlighting the emerging risks for companies in almost all industry sectors.

Read more...
OT calculator to align cyber investments with business goals
Industrial (Industry) Information Security Security Services & Risk Management
The OT Calculator has been developed specifically for industrial organisations to assess the potential costs of insufficient operational technology (OT) security. By offering detailed financial forecasts, the calculator empowers senior management to make well-informed decisions.

Read more...
From digital transformation to digital sovereignty
Security Services & Risk Management IoT & Automation
As cyberthreats grow, data regulations tighten, and AI becomes central to economic competitiveness, countries are recognising the need to control and protect their own digital assets.

Read more...
The age of Lean 4.0: Orchestrating intelligence and efficiency
Security Services & Risk Management
The convergence of Lean principles and AI (what we now call Lean 4.0) is no longer a theoretical exercise; it is the defining operational paradigm for survival and growth in a complex, data-intensive economy.

Read more...
Risks of open-source intelligence escalating in crime
Security Services & Risk Management Residential Estate (Industry) Smart Home Automation
CMS estimates that open-source intelligence has played a role in 20 - 30% of robberies over the past 12 months. In cybercrime, global research consistently shows that many offences rely on some form of open-source data exploitation.

Read more...
Seeing is no longer believing
Security Services & Risk Management
Fraud has shifted. It is no longer just about financial theft; it is about identity theft in the most visceral sense. The most effective control is often completely non-technical: the ‘pause and verify’ rule.

Read more...










While every effort has been made to ensure the accuracy of the information contained herein, the publisher and its agents cannot be held responsible for any errors contained, or any loss incurred as a result. Articles published do not necessarily reflect the views of the publishers. The editor reserves the right to alter or cut copy. Articles submitted are deemed to have been cleared for publication. Advertisements and company contact details are published as provided by the advertiser. Technews Publishing (Pty) Ltd cannot be held responsible for the accuracy or veracity of supplied material.




© Technews Publishing (Pty) Ltd. | All Rights Reserved.