Proficient operational security management

September 2019 Security Services & Risk Management

The quest to establish an organised and integrated security operations programme based on a Plan-Do-Check-Act (PDCA) cycle for continuous improvement is paramount for a successful security operation. A PDCA framework establishes efficiency, implementation, monitoring, reviewing and improvement and is critical, whether you are in the security service sector, an in-house practitioner or need comfort that your service partner is performing to agreed standards.

The security operations programme is an ongoing governance process, supported by top management and resourced to ensure the necessary steps are taken for a successful security programme. To this end, security managers should analyse critically what the key contributory factors are to the core business which they protect. This will clarify their role to ensure that the business objectives are achieved.

Once this process is complete, the first critical success area (CSA), namely ‘leadership’, can be established. This CSA will define the security strategy, policy, code of conduct and mission.

The second CSA is ‘people’. The security function can never be successful without competent and willing teams. The direction of the team is entrenched through clearly defined objectives. At this point of designing the programme, the notion and structure of your human resources must follow strategy to provide a clear picture of how the team should be comprised. A host of subset elements provide further criteria for this CSA.

The third CSA is ‘operations’. This is the heartbeat of the integrated programme. Every sub-category is actively involved with the proactive approach to risk mitigation, prevention of crime and ultimately the protection of assets.

‘Assurance’ and ‘quality’ make up the fourth leg in this process. Too often, good procedures, processes and other control parameters are implemented; however, the wheel of surety is not complete unless the processes have been subjected to oversight inspections and audits to establish the real value addition to the organisation, and consequently the success of the programme as a whole.

The fifth CSA is ‘technology’ in various forms and is in demand in modern security. This is crucial, especially if the planned programme demands proactive measures for crime prevention. However, the primary measurements from such systems must not only satisfy proactive measures, but also demonstrate the ability to report leading indicators rather than lagging these indicators.

In the world of the security owner, manager or advisor, the ability to provide security services not exceeding budgeted costs is key for success. The sixth CSA therefore addresses ‘costs’. Regular Lean Six Sigma approaches to all security processes identify the main elements of waste. This is coupled with key expenditure to ensure ALARP (as low as reasonably practicable) spend is achieved.

Finally, the seventh and equally crucial CSA is ‘investigation’ and ‘surveillance’. This area in the programme provides constant information for key decision makers to decide the proactive direction of the programme. This includes control room management as well as the direction and command of frontline offices.

Each CSA should be equipped with a primary metric for performance management; each metric is then measured and performance compliance discussed.

An integrated security management programme should be seen as a process of continuous improvement. The owners, management and leaders should constantly review the efficiency of the programme and make adjustments suitable to their business objectives and needs.

For more information contact Kevin van Zyl, Horizon Risk Solutions, +27 76 801 5639, [email protected]

Kevin van Zyl.
Kevin van Zyl.

Kevin van Zyl is the managing director of Horizon Risk Solutions. He has been successful in the implementation of a programme based on the above principles since 2013. The programme has made positive change to management teams as well as the greater security operation, ultimately contributing to the success of the core business.





Share this article:
Share via emailShare via LinkedInPrint this page



Further reading:

The line between locking residents out and restricting their access
News & Events Security Services & Risk Management Residential Estate (Industry)
A June 2026 High Court judgment has clarified one of the most contested issues in modern estate governance: when an HOA's digital access restrictions amount to unlawful self-help or spoliation, and when they do not.

Read more...
Modernise field communications with Push-to-Talk over Cellular
Products & Solutions Security Services & Risk Management
Sentiv is bringing Hytera’s Push-to-Talk over Cellular (PTToC) portfolio to organisations that need a more structured and controlled way to coordinate field teams, without extending a full private radio model to every team, site, or function.

Read more...
SAFPS urges taxpayers to remain alert to fraud
Security Services & Risk Management News & Events
The SAFPS warns taxpayers about evolving SARS scams this tax season, highlighting common fraud tactics, practical prevention tips, and trusted reporting channels to stay protected.

Read more...
Zero-touch automation certificate life cycle management loop
Products & Solutions Information Security Security Services & Risk Management
ManageEngine completes the certificate life cycle management loop with CA-agnostic, zero-touch automation. New post-deployment automation in Key Manager Plus removes the last manual step in certificate renewal as lifespans gradually shrink to 47 days

Read more...
Fire safety in South Africa
Technoswitch Fire Detection & Suppression Technews Publishing SMART Security Solutions Fire & Safety Security Services & Risk Management Editor's Choice
Fire safety is sometimes ignored, sometimes relegated to whatever is cheapest, and sometimes treated with the seriousness it deserves, given that it focuses on protecting life and assets. SMART Security Solutions asked Brett Birch, MD of Technoswitch, for some insights into the realities of fire safety in South Africa.

Read more...
Nimbus remote fire alarm management
Technoswitch Fire Detection & Suppression Security Services & Risk Management Fire & Safety
Nimbus connects key stakeholders to their fire alarm systems, simplifying compliance with fire safety standards and greatly improving visibility into critical events, thereby augmenting first responder processes that save lives and protect assets.

Read more...
Sophos launches AI-native cybersecurity defence system
News & Events Information Security Security Services & Risk Management
Built for a threat landscape reshaped by AI, Sophos Fusion unites security operations, endpoint, network security, identity, email, and cloud into one defence system that prevents, detects, investigates, and responds at AI speed.

Read more...
Stop supplier fraud at the moment of payment
News & Events Security Services & Risk Management
Cape Town-built platform bridges the gap between onboarding and transaction by securing identity inside the live channels where companies exchange invoices and banking details.

Read more...
Ungoverned AI agents and deepfakes pose critical threats
Information Security Security Services & Risk Management
Global study reveals 64% of South African organisations already deploy autonomous AI agents with little to no governance, while 63% of employees admit they are unlikely to be able to spot attacks such as deepfakes

Read more...
A risk-based approach to fire safety
Fire & Safety Security Services & Risk Management Industrial (Industry) Agriculture (Industry)
A report by fire engineering consultancy ASP Fire is challenging blanket assumptions around combustible-core sandwich panels, arguing instead for a rational, risk-based approach that balances fire safety requirements with commercial realities in sectors such as agriculture, manufacturing and industrial processing.

Read more...










While every effort has been made to ensure the accuracy of the information contained herein, the publisher and its agents cannot be held responsible for any errors contained, or any loss incurred as a result. Articles published do not necessarily reflect the views of the publishers. The editor reserves the right to alter or cut copy. Articles submitted are deemed to have been cleared for publication. Advertisements and company contact details are published as provided by the advertiser. Technews Publishing (Pty) Ltd cannot be held responsible for the accuracy or veracity of supplied material.




© Technews Publishing (Pty) Ltd. | All Rights Reserved.