Technology not enough

September 2010 Security Services & Risk Management

Risk mitigation requires an integrated security strategy.

Business today, including those in the financial sector, face such a broad range of security risks that only an integrated approach to risk management can guarantee the integrity of corporate data and transactions.

Unfortunately, while the theory of an integrated approach is fairly simple to understand, putting the security pieces in place can be a cumbersome process.

Part of the complexity of an integrated approach to security is that there is no definite point from which to expect an attack. Criminal forces external to a company are more sophisticated than ever and have access to powerful tools and devious techniques to gain entry even to a seemingly secure infrastructure.

But external forces are not the main threat facing companies.

“The greatest threat facing companies in the 21st century comes from within and the financial services arena is no different,” says Hedley Hurwitz, managing director of Magix Integration. “Over 60% of data loss and fraud are committed from the inside by employees one is inclined to trust.

“What this means is that a company can not reduce its risk exposure by buying the latest and greatest security product. Effective risk management requires an integrated approach to discovering, mitigating and then monitoring risks via a comprehensive security strategy.”

The process he recommends for the financial services industry is to start with a company-wide vulnerability audit. This audit will quickly determine in which areas the company is at immediate risk. Fast resolution of these problems will allow the organisation to continue operating in relative safety while moving on to the next step, which involves doing a more in-depth analysis of its business processes and operating methodologies.

The next step is to assess the broader environment the company operates in and the additional external risks to be managed.

Collating the data collected from the above steps provides the organisation with its full risk profile. With this profile in mind, the organisation is able to accurately determine the optimal security strategy to follow.

“Of course there is no such thing as a 100% secure company,” notes Hurwitz. “A good security strategy is a balance between the organisation’s need to be invulnerable and its operational require-ments to provide access to anything at any time.”

“The key to an effective security strategy is to take an integrated approach.” An integrated approach empowers the business to make rational and effective decisions that will secure what needs to be secured without hampering the continued operation of the business.”

For more information contact Magix Integration, +27 (0)11 258 4442, [email protected]





Share this article:
Share via emailShare via LinkedInPrint this page



Further reading:

Employee screening trends
iFacts Security Services & Risk Management
Criminal record checks still the most popular background check conducted around the world, but global employee screening trends are changing according to iFacts.

Read more...
South African business readies for a journey to the cloud
Security Services & Risk Management
There is an increasing demand for cloud services in the country, driven by the need to use advanced technologies such as AI while also providing hybrid workers access to data, regardless of their location.

Read more...
What to do in the face of growing ransomware attacks
Technews Publishing Cyber Security Security Services & Risk Management
Ransomware attacks are proliferating, with attackers becoming more sophisticated and aggressive, and often hitting the same victims more than once, in more than one way.

Read more...
South Africa can accelerate its move to smart cities
Security Services & Risk Management
What global smart city leaders have in common is that they have built on, and developed existing infrastructure, transforming it iteratively; South Africa is well positioned to adopt this approach.

Read more...
Where does SA logistics stand as far as cybersecurity is concerned?
Logistics (Industry) Security Services & Risk Management
Lesiba Sebola, director of information technology at Bidvest International Logistics, says it is paramount to safeguard IT infrastructure given how central it has become to operations.

Read more...
The Deposita Protector 3000 d-s1
Deposita Security Services & Risk Management
The Protector 3000 d-s1, designed for medium-sized enterprises, improves the level of security at the business and helps optimise resources by streamlining cash-handling processes.

Read more...
Top fraud trends to watch in 2023
News Security Services & Risk Management
Even though financial concerns remain a significant obstacle for companies in implementing new anti-fraud technologies, 60% of businesses expect an increase in their anti-fraud technology budgets in the next two years.

Read more...
Be cautious when receiving deliveries at home
News Perimeter Security, Alarms & Intruder Detection Security Services & Risk Management
Community reports of residents being held up at their gate when collecting fast food deliveries at home are once again surfacing.

Read more...
Sasol ensures Zero Trust for SAP financials with bioLock
Technews Publishing Editor's Choice Cyber Security Security Services & Risk Management
Multi-factor authentication, including biometrics, for SAP Financials from realtime North America prevents financial compliance avoidance for Sasol.

Read more...
Protecting yourself from DDoS attacks
Cyber Security Security Services & Risk Management
A DDoS attack, when an attacker floods a server or network with Internet traffic to prevent users from accessing connected online services, can be costly in both earnings and reputation.

Read more...