Proficient operational security management

September 2019 Security Services & Risk Management

The quest to establish an organised and integrated security operations programme based on a Plan-Do-Check-Act (PDCA) cycle for continuous improvement is paramount for a successful security operation. A PDCA framework establishes efficiency, implementation, monitoring, reviewing and improvement and is critical, whether you are in the security service sector, an in-house practitioner or need comfort that your service partner is performing to agreed standards.

The security operations programme is an ongoing governance process, supported by top management and resourced to ensure the necessary steps are taken for a successful security programme. To this end, security managers should analyse critically what the key contributory factors are to the core business which they protect. This will clarify their role to ensure that the business objectives are achieved.

Once this process is complete, the first critical success area (CSA), namely ‘leadership’, can be established. This CSA will define the security strategy, policy, code of conduct and mission.

The second CSA is ‘people’. The security function can never be successful without competent and willing teams. The direction of the team is entrenched through clearly defined objectives. At this point of designing the programme, the notion and structure of your human resources must follow strategy to provide a clear picture of how the team should be comprised. A host of subset elements provide further criteria for this CSA.

The third CSA is ‘operations’. This is the heartbeat of the integrated programme. Every sub-category is actively involved with the proactive approach to risk mitigation, prevention of crime and ultimately the protection of assets.

‘Assurance’ and ‘quality’ make up the fourth leg in this process. Too often, good procedures, processes and other control parameters are implemented; however, the wheel of surety is not complete unless the processes have been subjected to oversight inspections and audits to establish the real value addition to the organisation, and consequently the success of the programme as a whole.

The fifth CSA is ‘technology’ in various forms and is in demand in modern security. This is crucial, especially if the planned programme demands proactive measures for crime prevention. However, the primary measurements from such systems must not only satisfy proactive measures, but also demonstrate the ability to report leading indicators rather than lagging these indicators.

In the world of the security owner, manager or advisor, the ability to provide security services not exceeding budgeted costs is key for success. The sixth CSA therefore addresses ‘costs’. Regular Lean Six Sigma approaches to all security processes identify the main elements of waste. This is coupled with key expenditure to ensure ALARP (as low as reasonably practicable) spend is achieved.

Finally, the seventh and equally crucial CSA is ‘investigation’ and ‘surveillance’. This area in the programme provides constant information for key decision makers to decide the proactive direction of the programme. This includes control room management as well as the direction and command of frontline offices.

Each CSA should be equipped with a primary metric for performance management; each metric is then measured and performance compliance discussed.

An integrated security management programme should be seen as a process of continuous improvement. The owners, management and leaders should constantly review the efficiency of the programme and make adjustments suitable to their business objectives and needs.

For more information contact Kevin van Zyl, Horizon Risk Solutions, +27 76 801 5639, [email protected]

Kevin van Zyl.
Kevin van Zyl.

Kevin van Zyl is the managing director of Horizon Risk Solutions. He has been successful in the implementation of a programme based on the above principles since 2013. The programme has made positive change to management teams as well as the greater security operation, ultimately contributing to the success of the core business.





Share this article:
Share via emailShare via LinkedInPrint this page



Further reading:

Fire safety in South Africa
Technoswitch Fire Detection & Suppression Technews Publishing SMART Security Solutions Fire & Safety Security Services & Risk Management Editor's Choice
Fire safety is sometimes ignored, sometimes relegated to whatever is cheapest, and sometimes treated with the seriousness it deserves, given that it focuses on protecting life and assets. SMART Security Solutions asked Brett Birch, MD of Technoswitch, for some insights into the realities of fire safety in South Africa.

Read more...
Nimbus remote fire alarm management
Technoswitch Fire Detection & Suppression Security Services & Risk Management Fire & Safety
Nimbus connects key stakeholders to their fire alarm systems, simplifying compliance with fire safety standards and greatly improving visibility into critical events, thereby augmenting first responder processes that save lives and protect assets.

Read more...
A risk-based approach to fire safety
Fire & Safety Security Services & Risk Management Industrial (Industry) Agriculture (Industry)
A report by fire engineering consultancy ASP Fire is challenging blanket assumptions around combustible-core sandwich panels, arguing instead for a rational, risk-based approach that balances fire safety requirements with commercial realities in sectors such as agriculture, manufacturing and industrial processing.

Read more...
Preventing and suppressing lithium fires
SMART Security Solutions Technews Publishing Editor's Choice Fire & Safety Security Services & Risk Management Smart Home Automation
SMART Security Solutions asked Clyde Becker, director of Pyro Brand, for some insight into the mechanics of lithium-ion battery fire risks, especially thermal runaway, and to define a comprehensive, layered approach to fire detection and suppression.

Read more...
Identity recovery matters most
Security Services & Risk Management
As cyberattacks grow more targeted, more destructive, and increasingly aimed at the very fabric of trust within the enterprise, the ability to restore identities has become just as critical as restoring data.

Read more...
ISO 27701 helps demonstrate privacy compliance beyond POPIA
Security Services & Risk Management
ISO 27701 include privacy-specific controls and provides a structured way to manage Personally Identifiable Information (PII) throughout its lifecycle, giving organisations a way to demonstrate how privacy is managed.

Read more...
Echoes of 2018? Follow-up on Woolworths explosions
Technews Publishing News & Events Security Services & Risk Management Retail (Industry) Facilities & Building Management
SMART Security Solutions follows up with Jimmy Roodt to find out more about an old connection to the Woolworths bombings from 2018. The investigation remains ongoing.

Read more...
Increase in cyberattacks on the manufacturing sector
Security Services & Risk Management News & Events Industrial (Industry)
According to a new Kaspersky ICS CERT report, in the first quarter of 2026, the percentage of industrial control systems (ICS) on which malicious objects were blocked reached 19,6% globally.

Read more...
Next-generation cash-in-transit vehicle
News & Events Security Services & Risk Management
Fidelity Services Group has unveiled a new, purpose-engineered Cash-in-Transit (CIT) vehicle designed to redefine crew protection, deter threats, and enhance operational resilience in an increasingly complex criminal environment.

Read more...
The risk at the edge of South Africa’s agriculture supply chain
Security Services & Risk Management Agriculture (Industry) Logistics (Industry)
Research from ESET has found that a significant number of South African agritech operators and farmers continue to believe their companies are not attractive targets for cybercriminals. Unfortunately, that belief is precisely what makes them one.

Read more...










While every effort has been made to ensure the accuracy of the information contained herein, the publisher and its agents cannot be held responsible for any errors contained, or any loss incurred as a result. Articles published do not necessarily reflect the views of the publishers. The editor reserves the right to alter or cut copy. Articles submitted are deemed to have been cleared for publication. Advertisements and company contact details are published as provided by the advertiser. Technews Publishing (Pty) Ltd cannot be held responsible for the accuracy or veracity of supplied material.




© Technews Publishing (Pty) Ltd. | All Rights Reserved.