Operational risk management addresses the new threats of the 21st century

June 2004 Security Services & Risk Management

As indubitably the most prestigious international hotel chain in South Africa, it possibly comes as no surprise to find that the Intercontinental Sandton Sun & Towers (which operate as two separate hotels) recently appointed a risk manager.

While the introduction of operational risk management may not be something new in terms of leading European or American hotels, it is believed to be a first in South Africa. The new appointee is Phillip Hulatt who had over 12 years' experience with the Sun International group before being headhunted for his present position. Hulatt occupied many positions at Sun International and benefited greatly from the group's extensive training programme. Although born in the UK, Hulatt opted to do his National Service with the SANDF and after completing his training at the Infantry School in Oudtshoorn he moved on to the 1st Parachute Battalion in Bloemfontein where he ended up as an instructor. Hulatt remains an active member of the SANDF's Reserve Force and has gained extensive experience in the security field.

Phillip Hulatt, Intercontinental 
Sun & Towers
Phillip Hulatt, Intercontinental Sun & Towers

Hulatt took up his new position earlier this year and there is still much to be done to achieve his goals. After his systems have been tried and proven at Sandton he hopes to roll out the system to the other Intercontinental in Johannesburg and the one located at Johannesburg International. While Hulatt sits in the office next to the Hotel's general manager, he reports to the Group Head Office in a multifaceted approach where he interacts with the group risk manager, the financial manager and the two general managers. While this may seem strange it will become clearer through further reading of this article that risk has multiple dimensions, not just security.

Security is, of course, very high up on his agenda as the Intercontinental has hosted many foreign dignitaries, including President Clinton, high profile businessmen and cabin crews from many airlines, all of whom could be subject to terrorist attacks. In all of these cases Hulatt liaises closely with their own security detail, who often visit the hotel in advance. In more sensitive situations, such as the recent inauguration ceremonies, he also calls on élite local units such as the bomb squad, special forces, embassy protection teams and others to provide a coordinated security solution.

As indicated, risk management is a very broad portfolio and Hulatt often assists in a marketing role where he is able to ensure potential VIP residents that they will be totally secure and will also enjoy the high level of service excellence offered by the hotel. In certain circumstances local police or security units will be used to sweep suites for possible explosive or eavesdropping devices. Both of these are highly unlikely because of the already comprehensive security where card access to rooms is logged and identifies the person. Unauthorised entry by someone not on the housekeeping staff, for example, would raise an alert that would immediately be investigated. In the last resort a VIP who is still uncomfortable would be offered his choice from a number of virtually identical suites.

While security services (personnel) for the hotel are outsourced, Hulatt has his own security manager and shift security managers. Monitoring of all the CCTV cameras (which, by the way, are unobtrusive and have to be pointed out), room access, fire and smoke alarms, etc, are managed from a single control room and all senior hotel management members of staff are available on a 24/7 basis being contacted via their cellphones which must always be switched on.

Being the luxury hotel that it is, security is almost invisible but being a new venue for me it was interesting to note that as soon as you appeared confused as to where you should go next (the two hotels are connected by an overhead ramp) there was always a bellboy at your side to offer advice, often walking personally with you to the area required. Although the older Sandton Sun is directly connected to the shopping mall this entry method to the hotel premises is sealed off after normal shopping/entertainment hours.

The possibility of fire is another major concern for hotels this size and fire prevention and reaction to it is another one of Hulatt's responsibilities. Obviously every room has a smoke detector and alarms from these are monitored from the control room. An alarm from a non-smoking room is an immediate concern and will result in rapid reaction with a personal visit to the room by one of the floor staff.

The Intercontinental has its own well-trained fire team and members of these would be the first responders in the event of an outbreak with backup being requested from the Sandton fire brigade, if required. The fire equipment (hoses, fire extinguishers and fire blankets) is meticulously maintained and checked and sealed at the stipulated intervals. At present evacuation drills are being carried out once a month, but this will decrease to once every two months once everyone is fully up to speed. Note that the hotel is frequented by the flight crews of many major international airlines and care is taken to isolate their rooms to this necessary but inconvenient drill (if you have spent the night on your feet).

The structure of the hotel itself with its central open atrium reduces the effect of the biggest killer, namely smoke, and provides the fire team with vital additional minutes in which to respond. A major fire hazard is of course the kitchen, a vast area to cover. Here, in addition to hoses and extinguishers, a powerful automatic sprinkler system is installed over critical areas (deep frying for example). In all sensitive areas of the kitchen large boards show contact numbers of people from the hotel sister to the manager in the event of any incident. In this and other areas fully equipped medical kits are readily accessible. Fireman's lifts are provided in the service lift system with automatic fire doors to prevent further spreading of the fire. Hulatt spends much of his time 'managing by walking about' and on our visit to the kitchen a group of staff in a remote area were severely criticised for having temporarily blocked a fire exit with a loaded trolley. Incidentally, in the area behind the banqueting and function rooms there is a large storage area for tables, chairs and the likes, and here the maximum storage height (to allow the sprinklers to operate effectively) is clearly demarcated with a broad solid yellow line - nothing is left to chance!

Another of Hulatt's concerns is shrinkage resulting from both staff and guests. Obviously in a hotel of this calibre no one is going to worry about a missing miniature from the mini-bar. On the other hand the cutlery and plates used are expensive and the same person that delivers room service re-collects the remains and ensures that all coffee pots, plates and cutlery are present. The rooms are fully checked after a guest's departure. This serves a dual purpose, first ensuring that nobody has walked off with the hairdryer or television, but more importantly to ensure that the guest has left nothing behind. If something like a cellphone charger has been forgotten it is sent on to the person concerned or if it is a frequent guest, the item will be bagged and tagged and will be in the guest's room on their next arrival. The equipment and assets belonging to the hotel must also be managed and here Hulatt has introduced a control release book that ensures that when hotel goods go out they do actually come back.

Today of course and with 11 September in mind, asymmetrical terrorist attacks (such as white powder) are a great fear. Hulatt has developed a master disaster plan that will cope with any scenario although he did say that he could do little about an aircraft flying into the building. However, the effect of that or any other disaster is minimised through having proper evacuation procedures that are well known by every member of staff, and by ensuring that as many staff as possible are trained in basic first aid. Naturally in the event of a power failure the hotels possess generators that will immediately kick in. As an added precaution non-mains powered lighting is provided in the internal fire escapes.

In terms of risk, even the outdoor pool area is of concern and an emergency phone is conveniently located here. Glass breakages in this area are immediately cleared up while even the chlorine level in the pool is carefully checked daily to ensure that it will not bleach the ladies' hair.

The environment also falls under the risk manager's portfolio and Intercontinental have strict rules in this regard. Frequent checks are made for the unlikely but highly dangerous Legionnaire's disease.

If you thought that risk management was just about security then this feature has probably broadened your perspective. As Hulatt correctly pointed out, the job of the general manager of a hotel is to generate revenue and not necessarily to look after the other aspects of day-to-day control. Today, those other crucial aspects relating to the safety and security of guests can be addressed through the use of an internal risk manager.

Share this article:
Share via emailShare via LinkedInPrint this page

Further reading:

Convergence of cyber and physical security
Integrated Solutions Security Services & Risk Management
The overlap between cybersecurity and physical security will necessitate the integration of cyber and physical security in order to enable the sharing of events to the same security operations centre.

Reduce electrical risks in commercial and industrial buildings
Security Services & Risk Management
Eaton’s new whitepaper aims to help professionals reduce electrical risks in commercial and industrial buildings and prevent faults that can endanger workers, damage property and disrupt business continuity.

Sustainability School opens for enrolment
Education (Industry) News Security Services & Risk Management
Three-part programme, first developed for Schneider Electric employees, is now available for free for companies worldwide. Attendees learn how to future-proof their businesses and accelerate their decarbonisation journeys.

Success in business process best practices
Technews Publishing Kleyn Change Management Editor's Choice Integrated Solutions Security Services & Risk Management
This month we commandeer time with the woman who is spearheading our national conversation on Women in Security, Lesley-Anne Kleyn, to get to know the lady herself a little better.

Security awareness training
Training & Education Security Services & Risk Management
It is critically important to have a security awareness solution that uses the limited time available to train effectively, and one that provides targeted education that is relevant to users.

Technology to thwart solar panel thieves
Asset Management, EAS, RFID Security Services & Risk Management Products
A highly efficient industrial network is coming to the rescue of the solar industry, as solar panels, inverters and batteries are being targeted by thieves and threaten to destabilise the industry.

Banking the unbanked comes with security risks
Financial (Industry) Security Services & Risk Management
As grim as it was, the pandemic of recent years and its resultant global economic crisis were a prime catalyst for record number of first-time bank users, the previously unbanked.

Security is like infinity
Alwinco Security Services & Risk Management
Security needs constant attention, dedication and input. The scary thing is that most people think that security is something that you buy, install, and then forget about.

Vulnerabilities in industrial cellular routers’ cloud management platforms
Industrial (Industry) Cyber Security Security Services & Risk Management
Research from OTORIO, a provider of operational technology cyber and digital risk management solutions, unveils cyber risks in M2M protocols and asset registration that expose hundreds of thousands of devices and OT networks to attack

SAFPS to launch a platform to combat fraud
Editor's Choice News Security Services & Risk Management
In response to the growing need for a proactive approach to fraud prevention, the SAFPS is developing a product called Yima, which will be a one-stop-shop for South Africans to report scams, secure their identity, and scan any website for vulnerabilities.