Technology not enough

September 2010 Security Services & Risk Management

Risk mitigation requires an integrated security strategy.

Business today, including those in the financial sector, face such a broad range of security risks that only an integrated approach to risk management can guarantee the integrity of corporate data and transactions.

Unfortunately, while the theory of an integrated approach is fairly simple to understand, putting the security pieces in place can be a cumbersome process.

Part of the complexity of an integrated approach to security is that there is no definite point from which to expect an attack. Criminal forces external to a company are more sophisticated than ever and have access to powerful tools and devious techniques to gain entry even to a seemingly secure infrastructure.

But external forces are not the main threat facing companies.

“The greatest threat facing companies in the 21st century comes from within and the financial services arena is no different,” says Hedley Hurwitz, managing director of Magix Integration. “Over 60% of data loss and fraud are committed from the inside by employees one is inclined to trust.

“What this means is that a company can not reduce its risk exposure by buying the latest and greatest security product. Effective risk management requires an integrated approach to discovering, mitigating and then monitoring risks via a comprehensive security strategy.”

The process he recommends for the financial services industry is to start with a company-wide vulnerability audit. This audit will quickly determine in which areas the company is at immediate risk. Fast resolution of these problems will allow the organisation to continue operating in relative safety while moving on to the next step, which involves doing a more in-depth analysis of its business processes and operating methodologies.

The next step is to assess the broader environment the company operates in and the additional external risks to be managed.

Collating the data collected from the above steps provides the organisation with its full risk profile. With this profile in mind, the organisation is able to accurately determine the optimal security strategy to follow.

“Of course there is no such thing as a 100% secure company,” notes Hurwitz. “A good security strategy is a balance between the organisation’s need to be invulnerable and its operational require-ments to provide access to anything at any time.”

“The key to an effective security strategy is to take an integrated approach.” An integrated approach empowers the business to make rational and effective decisions that will secure what needs to be secured without hampering the continued operation of the business.”

For more information contact Magix Integration, +27 (0)11 258 4442, [email protected]





Share this article:
Share via emailShare via LinkedInPrint this page



Further reading:

SAFPS issues SAPS impersonation scam warning
News & Events Security Services & Risk Management
The Southern African Fraud Prevention Service (SAFPS) is warning the public against a scam in which scammers pose as members of the South African Police Service (SAPS) and trick and intimidate individuals into handing over personal and financial information.

Read more...
Rewriting the rules of reputation
Technews Publishing Editor's Choice Security Services & Risk Management
Public Relations is more crucial than ever in the generative AI and LLMs age. AI-driven search engines no longer just scan social media or reviews, they prioritise authoritative, editorial content.

Read more...
How can South African organisations fast-track their AI initiatives?
AI & Data Analytics Security Services & Risk Management
While the AI market in South Africa is anticipated to grow by nearly 30% annually over the next five years, tapping into the promise and potential of AI is not easy.

Read more...
Efficient, future-proof estate security and management
Technews Publishing ElementC Solutions Duxbury Networking Fang Fences & Guards Secutel Technologies OneSpace Technologies DeepAlert SMART Security Solutions Editor's Choice Information Security Security Services & Risk Management Residential Estate (Industry) AI & Data Analytics IoT & Automation
In February this year, SMART Security Solutions travelled to Cape Town to experience the unbelievable experience of a city where potholes are fixed, and traffic lights work; and to host the Cape Town SMART Estate Security Conference 2025.

Read more...
Stallion repositions itself as a services provider
News & Events Security Services & Risk Management
Stallion has rebranded as Stallion Integrated Solutions to reflect its expanded capabilities beyond traditional security services to delivering integrated solutions that enhance safety, asset management, and operational efficiency.

Read more...
Seven tips to help ensure your backup batteries work
Power Management Security Services & Risk Management
Load shedding is back, officially or not. Lance Dickerson offers seven tips to prolong the life of your power backup systems and ensure they perform as intended when needed.

Read more...
Cybersecurity best practice
Information Security Security Services & Risk Management
Breach and attack simulation has become an essential element of cybersecurity strategies in any modern business by allowing companies to actively detect and resolve vulnerabilities through real-world attack simulations.

Read more...
Historic Collaboration cuts ATM Bombings by 30%
Online Intelligence Editor's Choice News & Events Security Services & Risk Management
Project Big-Bang, a collaborative industry-wide task team, has successfully reduced ATM bombings in South Africa by 30,7% during the predetermined measurement period of November, December and January 2024/5.

Read more...
Keeping safety central to enterprise risk management
Zulu Consulting Security Services & Risk Management
[Sponsored] As employee safety becomes an ever-more critical aspect of corporate risk management, Risk-IO assists risk managers in ensuring a safe working environment, whether in an industrial setting, an office, or anywhere.

Read more...
Empower individuals to control their biometric data
Information Security Access Control & Identity Management Security Services & Risk Management
What if your biometrics, now embedded in devices, workplaces, and airports, promising seamless access and enhanced security, was your greatest vulnerability in a cyberattack? Cybercriminals are focusing on knowing where biometric data is stored.

Read more...