Technology not enough

September 2010 Security Services & Risk Management

Risk mitigation requires an integrated security strategy.

Business today, including those in the financial sector, face such a broad range of security risks that only an integrated approach to risk management can guarantee the integrity of corporate data and transactions.

Unfortunately, while the theory of an integrated approach is fairly simple to understand, putting the security pieces in place can be a cumbersome process.

Part of the complexity of an integrated approach to security is that there is no definite point from which to expect an attack. Criminal forces external to a company are more sophisticated than ever and have access to powerful tools and devious techniques to gain entry even to a seemingly secure infrastructure.

But external forces are not the main threat facing companies.

“The greatest threat facing companies in the 21st century comes from within and the financial services arena is no different,” says Hedley Hurwitz, managing director of Magix Integration. “Over 60% of data loss and fraud are committed from the inside by employees one is inclined to trust.

“What this means is that a company can not reduce its risk exposure by buying the latest and greatest security product. Effective risk management requires an integrated approach to discovering, mitigating and then monitoring risks via a comprehensive security strategy.”

The process he recommends for the financial services industry is to start with a company-wide vulnerability audit. This audit will quickly determine in which areas the company is at immediate risk. Fast resolution of these problems will allow the organisation to continue operating in relative safety while moving on to the next step, which involves doing a more in-depth analysis of its business processes and operating methodologies.

The next step is to assess the broader environment the company operates in and the additional external risks to be managed.

Collating the data collected from the above steps provides the organisation with its full risk profile. With this profile in mind, the organisation is able to accurately determine the optimal security strategy to follow.

“Of course there is no such thing as a 100% secure company,” notes Hurwitz. “A good security strategy is a balance between the organisation’s need to be invulnerable and its operational require-ments to provide access to anything at any time.”

“The key to an effective security strategy is to take an integrated approach.” An integrated approach empowers the business to make rational and effective decisions that will secure what needs to be secured without hampering the continued operation of the business.”

For more information contact Magix Integration, +27 (0)11 258 4442, hedleyh@magix.co.za





Share this article:
Share via emailShare via LinkedInPrint this page



Further reading:

Convergence of cyber and physical security
Integrated Solutions Security Services & Risk Management
The overlap between cybersecurity and physical security will necessitate the integration of cyber and physical security in order to enable the sharing of events to the same security operations centre.

Read more...
Reduce electrical risks in commercial and industrial buildings
Security Services & Risk Management
Eaton’s new whitepaper aims to help professionals reduce electrical risks in commercial and industrial buildings and prevent faults that can endanger workers, damage property and disrupt business continuity.

Read more...
Sustainability School opens for enrolment
Education (Industry) News Security Services & Risk Management
Three-part programme, first developed for Schneider Electric employees, is now available for free for companies worldwide. Attendees learn how to future-proof their businesses and accelerate their decarbonisation journeys.

Read more...
Success in business process best practices
Technews Publishing Kleyn Change Management Editor's Choice Integrated Solutions Security Services & Risk Management
This month we commandeer time with the woman who is spearheading our national conversation on Women in Security, Lesley-Anne Kleyn, to get to know the lady herself a little better.

Read more...
Security awareness training
Training & Education Security Services & Risk Management
It is critically important to have a security awareness solution that uses the limited time available to train effectively, and one that provides targeted education that is relevant to users.

Read more...
Technology to thwart solar panel thieves
Asset Management, EAS, RFID Security Services & Risk Management Products
A highly efficient industrial network is coming to the rescue of the solar industry, as solar panels, inverters and batteries are being targeted by thieves and threaten to destabilise the industry.

Read more...
Banking the unbanked comes with security risks
Financial (Industry) Security Services & Risk Management
As grim as it was, the pandemic of recent years and its resultant global economic crisis were a prime catalyst for record number of first-time bank users, the previously unbanked.

Read more...
Security is like infinity
Alwinco Security Services & Risk Management
Security needs constant attention, dedication and input. The scary thing is that most people think that security is something that you buy, install, and then forget about.

Read more...
Vulnerabilities in industrial cellular routers’ cloud management platforms
Industrial (Industry) Cyber Security Security Services & Risk Management
Research from OTORIO, a provider of operational technology cyber and digital risk management solutions, unveils cyber risks in M2M protocols and asset registration that expose hundreds of thousands of devices and OT networks to attack

Read more...
SAFPS to launch a platform to combat fraud
Editor's Choice News Security Services & Risk Management
In response to the growing need for a proactive approach to fraud prevention, the SAFPS is developing a product called Yima, which will be a one-stop-shop for South Africans to report scams, secure their identity, and scan any website for vulnerabilities.

Read more...