Operational risk management addresses the new threats of the 21st century

June 2004 Security Services & Risk Management

As indubitably the most prestigious international hotel chain in South Africa, it possibly comes as no surprise to find that the Intercontinental Sandton Sun & Towers (which operate as two separate hotels) recently appointed a risk manager.

While the introduction of operational risk management may not be something new in terms of leading European or American hotels, it is believed to be a first in South Africa. The new appointee is Phillip Hulatt who had over 12 years' experience with the Sun International group before being headhunted for his present position. Hulatt occupied many positions at Sun International and benefited greatly from the group's extensive training programme. Although born in the UK, Hulatt opted to do his National Service with the SANDF and after completing his training at the Infantry School in Oudtshoorn he moved on to the 1st Parachute Battalion in Bloemfontein where he ended up as an instructor. Hulatt remains an active member of the SANDF's Reserve Force and has gained extensive experience in the security field.

Phillip Hulatt, Intercontinental 
Sun & Towers
Phillip Hulatt, Intercontinental Sun & Towers

Hulatt took up his new position earlier this year and there is still much to be done to achieve his goals. After his systems have been tried and proven at Sandton he hopes to roll out the system to the other Intercontinental in Johannesburg and the one located at Johannesburg International. While Hulatt sits in the office next to the Hotel's general manager, he reports to the Group Head Office in a multifaceted approach where he interacts with the group risk manager, the financial manager and the two general managers. While this may seem strange it will become clearer through further reading of this article that risk has multiple dimensions, not just security.

Security is, of course, very high up on his agenda as the Intercontinental has hosted many foreign dignitaries, including President Clinton, high profile businessmen and cabin crews from many airlines, all of whom could be subject to terrorist attacks. In all of these cases Hulatt liaises closely with their own security detail, who often visit the hotel in advance. In more sensitive situations, such as the recent inauguration ceremonies, he also calls on élite local units such as the bomb squad, special forces, embassy protection teams and others to provide a coordinated security solution.

As indicated, risk management is a very broad portfolio and Hulatt often assists in a marketing role where he is able to ensure potential VIP residents that they will be totally secure and will also enjoy the high level of service excellence offered by the hotel. In certain circumstances local police or security units will be used to sweep suites for possible explosive or eavesdropping devices. Both of these are highly unlikely because of the already comprehensive security where card access to rooms is logged and identifies the person. Unauthorised entry by someone not on the housekeeping staff, for example, would raise an alert that would immediately be investigated. In the last resort a VIP who is still uncomfortable would be offered his choice from a number of virtually identical suites.

While security services (personnel) for the hotel are outsourced, Hulatt has his own security manager and shift security managers. Monitoring of all the CCTV cameras (which, by the way, are unobtrusive and have to be pointed out), room access, fire and smoke alarms, etc, are managed from a single control room and all senior hotel management members of staff are available on a 24/7 basis being contacted via their cellphones which must always be switched on.

Being the luxury hotel that it is, security is almost invisible but being a new venue for me it was interesting to note that as soon as you appeared confused as to where you should go next (the two hotels are connected by an overhead ramp) there was always a bellboy at your side to offer advice, often walking personally with you to the area required. Although the older Sandton Sun is directly connected to the shopping mall this entry method to the hotel premises is sealed off after normal shopping/entertainment hours.

The possibility of fire is another major concern for hotels this size and fire prevention and reaction to it is another one of Hulatt's responsibilities. Obviously every room has a smoke detector and alarms from these are monitored from the control room. An alarm from a non-smoking room is an immediate concern and will result in rapid reaction with a personal visit to the room by one of the floor staff.

The Intercontinental has its own well-trained fire team and members of these would be the first responders in the event of an outbreak with backup being requested from the Sandton fire brigade, if required. The fire equipment (hoses, fire extinguishers and fire blankets) is meticulously maintained and checked and sealed at the stipulated intervals. At present evacuation drills are being carried out once a month, but this will decrease to once every two months once everyone is fully up to speed. Note that the hotel is frequented by the flight crews of many major international airlines and care is taken to isolate their rooms to this necessary but inconvenient drill (if you have spent the night on your feet).

The structure of the hotel itself with its central open atrium reduces the effect of the biggest killer, namely smoke, and provides the fire team with vital additional minutes in which to respond. A major fire hazard is of course the kitchen, a vast area to cover. Here, in addition to hoses and extinguishers, a powerful automatic sprinkler system is installed over critical areas (deep frying for example). In all sensitive areas of the kitchen large boards show contact numbers of people from the hotel sister to the manager in the event of any incident. In this and other areas fully equipped medical kits are readily accessible. Fireman's lifts are provided in the service lift system with automatic fire doors to prevent further spreading of the fire. Hulatt spends much of his time 'managing by walking about' and on our visit to the kitchen a group of staff in a remote area were severely criticised for having temporarily blocked a fire exit with a loaded trolley. Incidentally, in the area behind the banqueting and function rooms there is a large storage area for tables, chairs and the likes, and here the maximum storage height (to allow the sprinklers to operate effectively) is clearly demarcated with a broad solid yellow line - nothing is left to chance!

Another of Hulatt's concerns is shrinkage resulting from both staff and guests. Obviously in a hotel of this calibre no one is going to worry about a missing miniature from the mini-bar. On the other hand the cutlery and plates used are expensive and the same person that delivers room service re-collects the remains and ensures that all coffee pots, plates and cutlery are present. The rooms are fully checked after a guest's departure. This serves a dual purpose, first ensuring that nobody has walked off with the hairdryer or television, but more importantly to ensure that the guest has left nothing behind. If something like a cellphone charger has been forgotten it is sent on to the person concerned or if it is a frequent guest, the item will be bagged and tagged and will be in the guest's room on their next arrival. The equipment and assets belonging to the hotel must also be managed and here Hulatt has introduced a control release book that ensures that when hotel goods go out they do actually come back.

Today of course and with 11 September in mind, asymmetrical terrorist attacks (such as white powder) are a great fear. Hulatt has developed a master disaster plan that will cope with any scenario although he did say that he could do little about an aircraft flying into the building. However, the effect of that or any other disaster is minimised through having proper evacuation procedures that are well known by every member of staff, and by ensuring that as many staff as possible are trained in basic first aid. Naturally in the event of a power failure the hotels possess generators that will immediately kick in. As an added precaution non-mains powered lighting is provided in the internal fire escapes.

In terms of risk, even the outdoor pool area is of concern and an emergency phone is conveniently located here. Glass breakages in this area are immediately cleared up while even the chlorine level in the pool is carefully checked daily to ensure that it will not bleach the ladies' hair.

The environment also falls under the risk manager's portfolio and Intercontinental have strict rules in this regard. Frequent checks are made for the unlikely but highly dangerous Legionnaire's disease.

If you thought that risk management was just about security then this feature has probably broadened your perspective. As Hulatt correctly pointed out, the job of the general manager of a hotel is to generate revenue and not necessarily to look after the other aspects of day-to-day control. Today, those other crucial aspects relating to the safety and security of guests can be addressed through the use of an internal risk manager.





Share this article:
Share via emailShare via LinkedInPrint this page



Further reading:

The year of machine deception
Security Services & Risk Management AI & Data Analytics
The AU10TIX Global Fraud Report, Signals for 2026, warns of the looming agentic AI and quantum risk, leading to a surge in adaptive, self-learning fraud, and outlines how early warning systems are fighting back.

Read more...
Smarter access, stronger defence
Secutel Technologies Security Services & Risk Management Access Control & Identity Management Retail (Industry)
The holiday season brings excitement, increased foot traffic and, unfortunately, a spike in criminal activity targeting retail environments. Taking a proactive approach to security is essential in ensuring staff and assets remain safe.

Read more...
SA availability of immutable backup storage appliance
CASA Software Infrastructure Security Services & Risk Management
CASA Software has launched the newly released Nexsan VHR-Series, a fully integrated, enterprise-class, immutable backup storage appliance purpose-built for Veeam software environments, with usable capacity ranging from 64 TB to 3,3 PB.

Read more...
Beagle Watch named best security company in Johannesburg
News & Events Security Services & Risk Management
Beagle Watch Armed Response has been named Johannesburg’s Best Security Company in the 2025 Best of Joburg Awards, surpassing about 26 nominated private security firms in the greater Johannesburg region, thanks to overwhelming public support.

Read more...
The HR Trap
Security Services & Risk Management Training & Education
When human resources becomes a risk factor. Andre du Venage examines why your CCTV security and other technology risks are covered, but human resources are often overlooked.

Read more...
AI rewrites financial crime
Security Services & Risk Management Financial (Industry)
Criminals are exploiting South Africa’s high connectivity and still-maturing regulation to scale attacks faster than we can defend them. The speed and sophistication of these scams are outpacing the systems designed to stop them.

Read more...
Strengthening organisational integrity in 2026 and beyond
iFacts Security Services & Risk Management
In 2026, the risks facing organisations, whether in the corporate sector or government, will be more complex and far-reaching. Employee screening will have to be more complex and comprehensive.

Read more...
Syndicates exploit insider vulnerabilities in SA
Information Security Security Services & Risk Management
Today’s cyber criminals do not just exploit vulnerabilities in your systems; they exploit your people, turning trusted team members into unwitting accomplices or deliberate collaborators in their schemes.

Read more...
ArxTech: Over 30 years of evolving security solutions for South Africa’s toughest challenges
Security Services & Risk Management Integrated Solutions
[Sponsored] For over 30 years, a Centurion-based company has helped shape how security technology is designed, deployed, and supported in South Africa. Originally known as CellSecure, it now operates as ArxTech.

Read more...
Don’t Miss the Exclusive Launch of the AirXpress 3 SCBA
Security Services & Risk Management
Be the first to experience the all-new AirXpress 3 Self-Contained Breathing Apparatus (SCBA), designed and manufactured by MSA, and brought to you by PSA Africa.

Read more...










While every effort has been made to ensure the accuracy of the information contained herein, the publisher and its agents cannot be held responsible for any errors contained, or any loss incurred as a result. Articles published do not necessarily reflect the views of the publishers. The editor reserves the right to alter or cut copy. Articles submitted are deemed to have been cleared for publication. Advertisements and company contact details are published as provided by the advertiser. Technews Publishing (Pty) Ltd cannot be held responsible for the accuracy or veracity of supplied material.




© Technews Publishing (Pty) Ltd. | All Rights Reserved.