Breaking down the split between security and the company

June 2003 News & Events

Security is an integral part of a company's overall operations, and not an add-on department which is only called upon when there is trouble.

This is according to Mariaan van Kaam, executive director of behavioural management specialists VoiceIT South Africa. "Security awareness must be an enterprise wide issue, addressing the entire range of employee behaviour, from the office right through to the storeroom," says Van Kaam.

The facts are that 85% of the worst frauds in business worldwide were committed by employees, according to the latest international fraud survey conducted by Ernst & Young. "In addition, the survey showed that more than 50% of the fraudsters were in management positions," Van Kaam says.

Everybody's business

A major part of the problem lies in poor corporate governance and issues such as working conditions, staff motivation and loyalty, she adds. "This is why security is actually everybody's business, and the worst thing a company can do is pretend that all is well until some act of criminality is brought to their attention, and then reactively try to call in the security department to deal with it."

Pro-active intervention by the security company is therefore the only answer to deal with the problem of intra- and extra-organisational criminality," says Van Kaam. "This means ensuring that the artificial silos which have been built up between the security department and other parts of the organisation are broken down, and that the security department plays an active, in fact a proactive, role, in helping to drive the business goals of the company."

The security department should, for example, be involved in the planning of logistics, of staff screening, and the day to day running of the company. In addition, the company must ensure that security becomes everyone's business, and not just left to the security department.

"Just putting a guard at the door will not suffice to prevent crime," says Van Kaam. "Far better to try and prevent the crime from even taking place, than relying solely on a policing function, important as that may be. For example, before a shipping decision is taking, the security department needs to be involved, and so on."

Reaching a solution

One of the best proactive steps a company can take, and which heightens security awareness throughout an enterprise, is to adopt a staff motivational programme designed to engender staff loyalty and make everyone aware of how important security is for the company's overall wellbeing. This can take the form of a programme designed to make everyone aware that they all have a responsibility towards the company, and that their own welfare is at stake should the company suffer from criminality of any origin.

"The true cost of fraud goes beyond the financial loss and has implications for the company's reputation, morale, lost management time as well as trust within an organisation. Internal control and addressing HR issues are therefore the best weapon any company can have in preventing and detecting fraud," Van Kaam says.

The most common problem in this regard is getting management to understand just how far reaching a security solution must go, and the cost implications of such a solution. "It is in fact far cheaper to make security an enterprise-wide issue, than it is to try and deal reactively with security issues," says Van Kaam.

In one instance, a prominent South African telecommunications provider saw internal theft drop by more than half after a sustained programme of staff motivational instruction, and this figure has been beaten in many other industries since then. With recovery rates from perpetrators still standing at around 20%, the bulk of the cost of intra-organisational criminality is borne by the company, and ultimately by the consumer, she says.

"The security department has an onus upon itself to ensure that management is aware of the corporate-wide nature of security, and not concentrate on certain aspects to the detriment of others," says Van Kaam.

Pro-active solutions are available, but unless senior management buys into the concept of living security at all levels of the organisation, it is unlikely that they will buy into any sort of long term security solution at all.

For more information contact Mariaan van Kaam, VoiceIT South Africa, 011 954 1067.





Share this article:
Share via emailShare via LinkedInPrint this page



Further reading:

Highest increase in global cyberattacks in two years
Information Security News & Events
Check Point Global Research released new data on Q2 2024 cyber-attack trends, noting a 30% global increase in Q2 2024, with Africa experiencing the highest average weekly per organisation.

Read more...
The power of PKI and private sector innovation
Access Control & Identity Management News & Events Government and Parastatal (Industry)
At the recent ID4Africa 2025 Summit in Addis Ababa, the spotlight was firmly on building secure, inclusive, and scalable digital identity ecosystems for the African continent.

Read more...
Bosch Security renamed Keenfinity
News & Events
Globally renowned brands for video systems, access control and intrusion alarm systems, as well as communication systems, unite under the roof of the new company Keenfinity Group.

Read more...
2025 video surveillance market set for improved fortunes
News & Events Surveillance
Novaira Insights has unveiled its latest report, World Market for Video Surveillance Hardware and Software – 2025 Edition, forecasting a healthy growth rate of 8,1% until 2029, excluding China.

Read more...
Wialon announces integration with fleet maintenance and optimisation platform
News & Events Transport (Industry) Logistics (Industry)
Fleet management software platform integrates with a fleet maintenance and optimisation platform to support mutual customers for better workflows and deeper insights into fleet operations.

Read more...
DeepSneak deception
Information Security News & Events
Kaspersky Global Research & Analysis researchers have discovered a new malicious campaign which is distributing a Trojan through a fake DeepSeek-R1 Large Language Model (LLM) app for PCs.

Read more...
Almost 50% of companies choose to pay the ransom
News & Events Information Security
This year’s Sophos State of Ransomware 2025 report found that nearly 50% of companies paid the ransom to get their data back, the second-highest rate of ransom payment for ransom demands in six years.

Read more...
Value and industry insight
Securex South Africa Training & Education News & Events
Securex South Africa 2025, co-located with A-OSH EXPO, Facilities Management Expo, and Firexpo, drew thousands of security professionals from across the continent and beyond, offering a platform for networking, product discovery, and knowledge sharing.

Read more...
Gallagher Security achieves ISO 27001 recertification
News & Events Training & Education
Gallagher Security has successfully achieved certification to the updated ISO/IEC 27001:2022 standard for Information Security Management Systems (ISMS). This accomplishment builds on previous certifications and reflects a continued commitment to the highest standards of information security.

Read more...
Survey highlights cost of cyberdamage to industrial companies
Kaspersky Information Security News & Events
The majority of industrial organisations estimate their financial losses caused by cyberattacks to be over $1 million, while almost one in four report losses exceeding $5 million, and for some, it surpasses $10 million.

Read more...










While every effort has been made to ensure the accuracy of the information contained herein, the publisher and its agents cannot be held responsible for any errors contained, or any loss incurred as a result. Articles published do not necessarily reflect the views of the publishers. The editor reserves the right to alter or cut copy. Articles submitted are deemed to have been cleared for publication. Advertisements and company contact details are published as provided by the advertiser. Technews Publishing (Pty) Ltd cannot be held responsible for the accuracy or veracity of supplied material.




© Technews Publishing (Pty) Ltd. | All Rights Reserved.