Operational risk management addresses the new threats of the 21st century

June 2004 Security Services & Risk Management

As indubitably the most prestigious international hotel chain in South Africa, it possibly comes as no surprise to find that the Intercontinental Sandton Sun & Towers (which operate as two separate hotels) recently appointed a risk manager.

While the introduction of operational risk management may not be something new in terms of leading European or American hotels, it is believed to be a first in South Africa. The new appointee is Phillip Hulatt who had over 12 years' experience with the Sun International group before being headhunted for his present position. Hulatt occupied many positions at Sun International and benefited greatly from the group's extensive training programme. Although born in the UK, Hulatt opted to do his National Service with the SANDF and after completing his training at the Infantry School in Oudtshoorn he moved on to the 1st Parachute Battalion in Bloemfontein where he ended up as an instructor. Hulatt remains an active member of the SANDF's Reserve Force and has gained extensive experience in the security field.

Phillip Hulatt, Intercontinental 
Sun & Towers
Phillip Hulatt, Intercontinental Sun & Towers

Hulatt took up his new position earlier this year and there is still much to be done to achieve his goals. After his systems have been tried and proven at Sandton he hopes to roll out the system to the other Intercontinental in Johannesburg and the one located at Johannesburg International. While Hulatt sits in the office next to the Hotel's general manager, he reports to the Group Head Office in a multifaceted approach where he interacts with the group risk manager, the financial manager and the two general managers. While this may seem strange it will become clearer through further reading of this article that risk has multiple dimensions, not just security.

Security is, of course, very high up on his agenda as the Intercontinental has hosted many foreign dignitaries, including President Clinton, high profile businessmen and cabin crews from many airlines, all of whom could be subject to terrorist attacks. In all of these cases Hulatt liaises closely with their own security detail, who often visit the hotel in advance. In more sensitive situations, such as the recent inauguration ceremonies, he also calls on élite local units such as the bomb squad, special forces, embassy protection teams and others to provide a coordinated security solution.

As indicated, risk management is a very broad portfolio and Hulatt often assists in a marketing role where he is able to ensure potential VIP residents that they will be totally secure and will also enjoy the high level of service excellence offered by the hotel. In certain circumstances local police or security units will be used to sweep suites for possible explosive or eavesdropping devices. Both of these are highly unlikely because of the already comprehensive security where card access to rooms is logged and identifies the person. Unauthorised entry by someone not on the housekeeping staff, for example, would raise an alert that would immediately be investigated. In the last resort a VIP who is still uncomfortable would be offered his choice from a number of virtually identical suites.

While security services (personnel) for the hotel are outsourced, Hulatt has his own security manager and shift security managers. Monitoring of all the CCTV cameras (which, by the way, are unobtrusive and have to be pointed out), room access, fire and smoke alarms, etc, are managed from a single control room and all senior hotel management members of staff are available on a 24/7 basis being contacted via their cellphones which must always be switched on.

Being the luxury hotel that it is, security is almost invisible but being a new venue for me it was interesting to note that as soon as you appeared confused as to where you should go next (the two hotels are connected by an overhead ramp) there was always a bellboy at your side to offer advice, often walking personally with you to the area required. Although the older Sandton Sun is directly connected to the shopping mall this entry method to the hotel premises is sealed off after normal shopping/entertainment hours.

The possibility of fire is another major concern for hotels this size and fire prevention and reaction to it is another one of Hulatt's responsibilities. Obviously every room has a smoke detector and alarms from these are monitored from the control room. An alarm from a non-smoking room is an immediate concern and will result in rapid reaction with a personal visit to the room by one of the floor staff.

The Intercontinental has its own well-trained fire team and members of these would be the first responders in the event of an outbreak with backup being requested from the Sandton fire brigade, if required. The fire equipment (hoses, fire extinguishers and fire blankets) is meticulously maintained and checked and sealed at the stipulated intervals. At present evacuation drills are being carried out once a month, but this will decrease to once every two months once everyone is fully up to speed. Note that the hotel is frequented by the flight crews of many major international airlines and care is taken to isolate their rooms to this necessary but inconvenient drill (if you have spent the night on your feet).

The structure of the hotel itself with its central open atrium reduces the effect of the biggest killer, namely smoke, and provides the fire team with vital additional minutes in which to respond. A major fire hazard is of course the kitchen, a vast area to cover. Here, in addition to hoses and extinguishers, a powerful automatic sprinkler system is installed over critical areas (deep frying for example). In all sensitive areas of the kitchen large boards show contact numbers of people from the hotel sister to the manager in the event of any incident. In this and other areas fully equipped medical kits are readily accessible. Fireman's lifts are provided in the service lift system with automatic fire doors to prevent further spreading of the fire. Hulatt spends much of his time 'managing by walking about' and on our visit to the kitchen a group of staff in a remote area were severely criticised for having temporarily blocked a fire exit with a loaded trolley. Incidentally, in the area behind the banqueting and function rooms there is a large storage area for tables, chairs and the likes, and here the maximum storage height (to allow the sprinklers to operate effectively) is clearly demarcated with a broad solid yellow line - nothing is left to chance!

Another of Hulatt's concerns is shrinkage resulting from both staff and guests. Obviously in a hotel of this calibre no one is going to worry about a missing miniature from the mini-bar. On the other hand the cutlery and plates used are expensive and the same person that delivers room service re-collects the remains and ensures that all coffee pots, plates and cutlery are present. The rooms are fully checked after a guest's departure. This serves a dual purpose, first ensuring that nobody has walked off with the hairdryer or television, but more importantly to ensure that the guest has left nothing behind. If something like a cellphone charger has been forgotten it is sent on to the person concerned or if it is a frequent guest, the item will be bagged and tagged and will be in the guest's room on their next arrival. The equipment and assets belonging to the hotel must also be managed and here Hulatt has introduced a control release book that ensures that when hotel goods go out they do actually come back.

Today of course and with 11 September in mind, asymmetrical terrorist attacks (such as white powder) are a great fear. Hulatt has developed a master disaster plan that will cope with any scenario although he did say that he could do little about an aircraft flying into the building. However, the effect of that or any other disaster is minimised through having proper evacuation procedures that are well known by every member of staff, and by ensuring that as many staff as possible are trained in basic first aid. Naturally in the event of a power failure the hotels possess generators that will immediately kick in. As an added precaution non-mains powered lighting is provided in the internal fire escapes.

In terms of risk, even the outdoor pool area is of concern and an emergency phone is conveniently located here. Glass breakages in this area are immediately cleared up while even the chlorine level in the pool is carefully checked daily to ensure that it will not bleach the ladies' hair.

The environment also falls under the risk manager's portfolio and Intercontinental have strict rules in this regard. Frequent checks are made for the unlikely but highly dangerous Legionnaire's disease.

If you thought that risk management was just about security then this feature has probably broadened your perspective. As Hulatt correctly pointed out, the job of the general manager of a hotel is to generate revenue and not necessarily to look after the other aspects of day-to-day control. Today, those other crucial aspects relating to the safety and security of guests can be addressed through the use of an internal risk manager.





Share this article:
Share via emailShare via LinkedInPrint this page



Further reading:

The line between locking residents out and restricting their access
News & Events Security Services & Risk Management Residential Estate (Industry)
A June 2026 High Court judgment has clarified one of the most contested issues in modern estate governance: when an HOA's digital access restrictions amount to unlawful self-help or spoliation, and when they do not.

Read more...
Modernise field communications with Push-to-Talk over Cellular
Products & Solutions Security Services & Risk Management
Sentiv is bringing Hytera’s Push-to-Talk over Cellular (PTToC) portfolio to organisations that need a more structured and controlled way to coordinate field teams, without extending a full private radio model to every team, site, or function.

Read more...
SAFPS urges taxpayers to remain alert to fraud
Security Services & Risk Management News & Events
The SAFPS warns taxpayers about evolving SARS scams this tax season, highlighting common fraud tactics, practical prevention tips, and trusted reporting channels to stay protected.

Read more...
Zero-touch automation certificate life cycle management loop
Products & Solutions Information Security Security Services & Risk Management
ManageEngine completes the certificate life cycle management loop with CA-agnostic, zero-touch automation. New post-deployment automation in Key Manager Plus removes the last manual step in certificate renewal as lifespans gradually shrink to 47 days

Read more...
Fire safety in South Africa
Technoswitch Fire Detection & Suppression Technews Publishing SMART Security Solutions Fire & Safety Security Services & Risk Management Editor's Choice
Fire safety is sometimes ignored, sometimes relegated to whatever is cheapest, and sometimes treated with the seriousness it deserves, given that it focuses on protecting life and assets. SMART Security Solutions asked Brett Birch, MD of Technoswitch, for some insights into the realities of fire safety in South Africa.

Read more...
Nimbus remote fire alarm management
Technoswitch Fire Detection & Suppression Security Services & Risk Management Fire & Safety
Nimbus connects key stakeholders to their fire alarm systems, simplifying compliance with fire safety standards and greatly improving visibility into critical events, thereby augmenting first responder processes that save lives and protect assets.

Read more...
Sophos launches AI-native cybersecurity defence system
News & Events Information Security Security Services & Risk Management
Built for a threat landscape reshaped by AI, Sophos Fusion unites security operations, endpoint, network security, identity, email, and cloud into one defence system that prevents, detects, investigates, and responds at AI speed.

Read more...
Stop supplier fraud at the moment of payment
News & Events Security Services & Risk Management
Cape Town-built platform bridges the gap between onboarding and transaction by securing identity inside the live channels where companies exchange invoices and banking details.

Read more...
Ungoverned AI agents and deepfakes pose critical threats
Information Security Security Services & Risk Management
Global study reveals 64% of South African organisations already deploy autonomous AI agents with little to no governance, while 63% of employees admit they are unlikely to be able to spot attacks such as deepfakes

Read more...
A risk-based approach to fire safety
Fire & Safety Security Services & Risk Management Industrial (Industry) Agriculture (Industry)
A report by fire engineering consultancy ASP Fire is challenging blanket assumptions around combustible-core sandwich panels, arguing instead for a rational, risk-based approach that balances fire safety requirements with commercial realities in sectors such as agriculture, manufacturing and industrial processing.

Read more...










While every effort has been made to ensure the accuracy of the information contained herein, the publisher and its agents cannot be held responsible for any errors contained, or any loss incurred as a result. Articles published do not necessarily reflect the views of the publishers. The editor reserves the right to alter or cut copy. Articles submitted are deemed to have been cleared for publication. Advertisements and company contact details are published as provided by the advertiser. Technews Publishing (Pty) Ltd cannot be held responsible for the accuracy or veracity of supplied material.




© Technews Publishing (Pty) Ltd. | All Rights Reserved.