Preventing computer theft

October 2003 Security Services & Risk Management

The presence of valuable office equipment at specific locations inside buildings and offices is a strong motivating factor for theft and robbery. Computers and laptops are an increasingly popular item for criminals who target them because of their vulnerability, availability and ease of disposal.

Although computer theft is a common problem throughout the industrialised world, in South Africa it has reached very serious proportions. In fact, it has been reported that more than 60% of all South African companies have had computers stolen over the past 18 months. In South Africa, computer theft is often accompanied by violence or threat of violence as when, for instance, employees or security guards are attacked during the commission of the crime.

Crime intelligence

Organised crime syndicates have been linked to the recent spate of computer thefts and robberies. Commercial/corporate businesses are therefore not dealing with single/isolated attacks, but rather with a systematic action on the part of organised criminal gangs operating in small groups, armed and ready to use violence if necessary, eg, when confronted by security.

In many instances, as experienced by the author, the same company can be subjected, over a short period of time, to repeat victimisation because the criminals know that new computers are issued within a couple of days.

It has also been reported that computers are finding their way across the borders of South Africa. The presence of developing economies in southern Africa, eg, Mozambique and Angola, adds credibility to this information.

Intelligence gathering indicates that the criminals' modus operandi when stealing computers usually involves the following actions.

* They assess both rewards and risks. If the risk of identification is too high and the reward too little, criminals will usually move to an easier target.

* They are fully aware of the presence of guards in the complex and, often, know where to inflict maximum losses in the shortest possible time.

* They usually act at night in order to reduce the risk of identification and apprehension.

* They wait for the right moment to strike, eg, when security is as far as possible from the scene or has just completed a patrol.

* They are aware of the fact that, in order to avoid a confrontation with on site security, armed response or police, they need to act as quickly and efficiently as possible, within a very limited period of time, especially when the alarm has detected their presence.

* They usually act in groups in order to remove as many computers as possible in the shortest period of time possible.

* They are usually armed and willing to inflict injuries or death to anybody crossing their path.

* Once a company is identified as an easy target, the risk for repeat victimisation is very real.

Having said that, there have been recorded instances in which an entire security and work force (usually night shift employees) in a complex was held up by a determined group of robbers. This gives the criminals sufficient time to cause maximum losses to a company. In a recent incident involving a similar modus operandi, an important news agency suffered the loss of more than 50 computers.

Risk factors

The areas most vulnerable to computer theft, particularly smash and grab attacks, are those where there is a high concentration of computers, eg, IT and project departments, creditors and debtors departments, etc.

These areas require immediate attention in that they offer the right opportunity for criminals to commit computer theft.

Although being sited within the boundaries of a well protected complex reduces the likelihood of a theft and robbery attack targeting computer equipment, the possibility for this type of crime to occur should not be underestimated.

Preventing computer theft

Not only the immediate areas where computers are located need to be protected. In fact, it can be stated that effective computer security starts with the perimeter fence and proceeds inwards, through a combination of crime reduction measures such as, amongst others, good quality fencing, lighting, external passives, infrareds and beams, CCTV systems, intruder detection systems, solid locks, glass protection (against smash and grab), as well as trained guards.

The security of the computer itself is also of the utmost importance. In this regard, the following preventive measures should be considered.

* Mark your property in a permanent and prominent way. Keep an inventory of all computer equipment. This can help prevent internal theft, and will help the police if you are burgled.

* Arrange to have the computer's component parts marked, and advertise this on the outside of the computer. However, in the interest of safety always seek professional help before opening a computer and check that you will not invalidate any warranty or guarantee.

* The most secure place to store a computer is in a high security cabinet or safe. Some models allow you to use the computer inside the cabinet.

* Alternatively, anchor your computer to something solid. You can fix it to the work surface with security plates. Some of these devices encase the processor unit completely so they protect the components as well as the computer. All lock-down equipment of this kind should conform to loss prevention standard.

* Another way of protecting your computer is to attach it to furniture or walls with a cable kit which links computer equipment together. The cables are made of steel and they should be at least 7,5 mm thick. This method will help protect the computer, although it will not prevent a thief gaining access to the computers' parts. A low cost way of giving some protection to the components is to replace the cabinet screws with security screws.

* Fit an alarm. Some of these fit inside the computer and sound if the equipment is moved. Others, called 'loop' alarms have a cable which passes through the equipment and which sounds if it is broken.

* Site the computer away from the ground floor windows if possible.

* Remember to back-up data on disk on a regular basis or at a remote station via the intranet. The data within your computer can also be protected by using locking devices which cover or slot into the disk drive's bezel.

* If you carry a portable computer or laptop around with you, keep it out of sight when you are travelling.

* Do not leave it in view in a car, even when you are in the car yourself - thieves may try to snatch it when the car is stationary.

* Remember that thieves will recognise the special cases that portable computers come in - conceal them in a briefcase or bag instead.

* Carry back-up disks and, if you are able to, hard disk drives separately.

* Do not leave a portable computer lying about in the office - keep it locked away or take it home at the end of a working day.

Conclusion

Beside the negative financial implications, the loss of several computers as a result of crime may cause a serious disruption to a company's activities. Furthermore, the risk of a violent confrontation during an incident of computer theft should never be underestimated. Therefore, the adoption of the most effective defensive strategies is of the utmost importance.

For more information contact Elio Zannoni, International Threat Analysis, 011 792 3739, ez@i-t-a.co.za, www.i.t.a.co.za

ABOUT THE AUTHOR

Elio Zannoni is a criminologist and specialist in crime risk factors and prevention strategies. He can be contacted at International Threat Analysis, a specialist, international risk consultancy involved in the intelligence and analysis of crime threats and risks worldwide.





Share this article:
Share via emailShare via LinkedInPrint this page



Further reading:

The security debt hidden in residential estates
Security Services & Risk Management Integrated Solutions Residential Estate (Industry)
Many residential estates undermine their own security not through a lack of technology, but through hidden weaknesses in gate design, fragmented systems, recurring software dependence, weak operational ownership, and insufficient estate management input.

Read more...
Verification is reshaping South Africa’s labour market
Security Services & Risk Management Asset Management Commercial (Industry)
Hiring faster, trusting less: in a labour market defined by both constraint and potential, the ability to hire with confidence may well become one of the most important competitive advantages.

Read more...
Africa’s opportunity to shape the future of human-centred AI
AI & Data Analytics Security Services & Risk Management
Across the Global South, countries are not yet locked into decades of legacy AI systems, energy-intensive infrastructure, or governance frameworks designed for a different technological era. That creates something rare in technology development: a cleaner slate.

Read more...
AURA appoints Taryn Winer as global head of people
News & Events Security Services & Risk Management
Following its €13,5 million Series B funding round last year and accelerating international expansion, particularly across the United States, AURA has appointed Taryn Winer as global head of people.

Read more...
95% do not have full trust in cybersecurity vendors
Information Security Security Services & Risk Management
Trust in cybersecurity vendors is fragile, difficult to measure, and increasingly shaping risk posture at both operational and board levels. Lack of verifiable transparency undermines cybersecurity decision-making, according to Sophos-backed research.

Read more...
Enhancing control room operations
iFacts Security Services & Risk Management Surveillance
As South Africa faces complex and more advanced security challenges, the demand for advanced surveillance solutions, including CCTV and security control rooms, continues to surge, but what about the people in front of the screens?

Read more...
Understanding the Shared Responsibility Model
Infrastructure Security Services & Risk Management
While the cloud can certainly be a growth enabler in many ways, it can also introduce new security risks. Companies want to have a clear understanding of where their security duties end and where their cloud service provider’s begin.

Read more...
“This Is Theft!” SASA slams Mafoko Security
News & Events Security Services & Risk Management Associations
The Security Association of South Africa (SASA) has issued a stark warning that the long-running Mafoko Security Patrols scandal is no longer an isolated case of employer misconduct, but evidence of a systemic failure in South Africa’s regulatory and governance structures.

Read more...
Making a mesh for security
Information Security Security Services & Risk Management
Credential-based attacks have reached epidemic levels. For African CISOs in particular, the message is clear: identity is now the perimeter, and defences must reflect that reality with coherence and context.

Read more...
Privacy by design or by accident
Security Services & Risk Management Infrastructure
Africa’s data future depends on getting it right at the start. If privacy controls do not withstand real-world conditions, such as unstable power, fragile last-mile connectivity, shared devices, and decentralised branch environments, then privacy exists only on paper.

Read more...










While every effort has been made to ensure the accuracy of the information contained herein, the publisher and its agents cannot be held responsible for any errors contained, or any loss incurred as a result. Articles published do not necessarily reflect the views of the publishers. The editor reserves the right to alter or cut copy. Articles submitted are deemed to have been cleared for publication. Advertisements and company contact details are published as provided by the advertiser. Technews Publishing (Pty) Ltd cannot be held responsible for the accuracy or veracity of supplied material.




© Technews Publishing (Pty) Ltd. | All Rights Reserved.