Which 20% of your employees are expendable?

September 2024 Security Services & Risk Management

If you want to distinguish between acceptable risk and unacceptable risk, perhaps you need to consider what security means to you. Health & Safety has taught us that there is an ‘acceptable risk’, and while that may be true in the Health & Safety world, it is most definitely not true in the security world.

When you have acceptable risks, you have acceptable crimes. Which crimes are acceptable? Theft? Rape? Murder? Kidnapping? Armed Robbery? Bribery and Corruption?

If you agree that no crime should be acceptable, you should agree that no security risk should be acceptable, and no reasonable solution should be unacceptable. This means that you should take all the necessary precautions and make every effort to eliminate all security risks, not just some of them in alignment with your duty, accountability, and responsibilities.

We pose two questions below.

Question 1

Which 20% of your employees are considered expendable? While you may feel relieved when the Risk Matrix indicates a low-risk percentage, have you ever pondered over the decision-making process regarding which 10% or 20% of your employees are deemed expendable?

Examining the Risk Matrix, you will notice five colour-coded categories ranging from ‘high to low’ risk. The dark green category represents low-risk areas, accounting for 20%, while the red category signifies the highest risk, amounting to 100%, with light green, yellow and orange in between.

In the realm of security, classifying something as low risk still implies the existence of a risk, even if it is only 20%. A risk remains a risk, regardless of its magnitude. Whether someone has stolen a car or taken a life, they are still considered a criminal. There is no grey area in between.

Furthermore, it is important to note that there is no standard formula for calculating the risk factor. The Risk Matrix, derived from the concept of Health & Safety, was applied to the security sector. Terms like probability and likelihood are two words that cannot and should not be used in the context of security.

Security should not be measured based on likelihood or probability; rather, it should be assessed in terms of opportunity. Many individuals make this common mistake. Even if a risk is deemed low, it remains a risk.

The concept of acceptable risk solely applies to Health & Safety and has no place in the security risk spectrum. Essentially, the Risk Matrix should not be used for anything related to security.

While certain security risks may require more immediate attention than others, it is crucial to recognise that any risk, regardless of its level, must be eliminated. Accepting a security risk provides an opportunity for criminal activities. Having a 20% risk rate means a 20% chance of becoming a victim of crime. Is that a risk you are willing to take?

Question 2

What exactly is an acceptable level of risk? Is stealing acceptable? Is corruption acceptable? Is it acceptable to steal public property and municipal assets? What about a hijacking? Do you consider rape to be an acceptable risk, or is it beyond the acceptable threshold? Who must become a victim of crime before action is taken? Most importantly, who decides what constitutes an acceptable risk, and what criteria are used to make such decisions?

If you asked anybody about acceptable crimes, they would most certainly say that no crime is acceptable. When you go into the paperwork, risk management, plans, proposals, and so on, you will come across the Risk Matrix, which indicates that certain percentages of risk are accepted.

Accepting the use of this matrix in any document supplied to you and working on its basis means accepting security risks that create opportunities for crime. As a result, you implicitly accept that some crimes are acceptable.

Acceptable risks will be integrated into your framework if:

• Security risks are not professionally identified.

• There are no risk-specific solutions to mitigate security risks.

• Standard operating procedures (SOPs) are not prepared for potential legal proceedings.

• Management procedures and processes are not established and not verifiable.

Despite years of fighting crime and investing in security equipment, it is troubling to see that our situation has not improved and may have even worsened. The statistics on crime support this statement, so it is not speculative.

We are losing the fight against crime and corruption in South Africa. The most common reason for poor security or security failures is ignorance and a lack of willpower to address them.


Credit(s)




Share this article:
Share via emailShare via LinkedInPrint this page



Further reading:

Rewriting the rules of reputation
Technews Publishing Editor's Choice Security Services & Risk Management
Public Relations is more crucial than ever in the generative AI and LLMs age. AI-driven search engines no longer just scan social media or reviews, they prioritise authoritative, editorial content.

Read more...
How can South African organisations fast-track their AI initiatives?
AI & Data Analytics Security Services & Risk Management
While the AI market in South Africa is anticipated to grow by nearly 30% annually over the next five years, tapping into the promise and potential of AI is not easy.

Read more...
Efficient, future-proof estate security and management
Technews Publishing ElementC Solutions Duxbury Networking Fang Fences & Guards Secutel Technologies OneSpace Technologies DeepAlert SMART Security Solutions Editor's Choice Information Security Security Services & Risk Management Residential Estate (Industry) AI & Data Analytics IoT & Automation
In February this year, SMART Security Solutions travelled to Cape Town to experience the unbelievable experience of a city where potholes are fixed, and traffic lights work; and to host the Cape Town SMART Estate Security Conference 2025.

Read more...
Stallion repositions itself as a services provider
News & Events Security Services & Risk Management
Stallion has rebranded as Stallion Integrated Solutions to reflect its expanded capabilities beyond traditional security services to delivering integrated solutions that enhance safety, asset management, and operational efficiency.

Read more...
Seven tips to help ensure your backup batteries work
Power Management Security Services & Risk Management
Load shedding is back, officially or not. Lance Dickerson offers seven tips to prolong the life of your power backup systems and ensure they perform as intended when needed.

Read more...
Cybersecurity best practice
Information Security Security Services & Risk Management
Breach and attack simulation has become an essential element of cybersecurity strategies in any modern business by allowing companies to actively detect and resolve vulnerabilities through real-world attack simulations.

Read more...
Historic Collaboration cuts ATM Bombings by 30%
Online Intelligence Editor's Choice News & Events Security Services & Risk Management
Project Big-Bang, a collaborative industry-wide task team, has successfully reduced ATM bombings in South Africa by 30,7% during the predetermined measurement period of November, December and January 2024/5.

Read more...
Keeping safety central to enterprise risk management
Zulu Consulting Security Services & Risk Management
[Sponsored] As employee safety becomes an ever-more critical aspect of corporate risk management, Risk-IO assists risk managers in ensuring a safe working environment, whether in an industrial setting, an office, or anywhere.

Read more...
Empower individuals to control their biometric data
Information Security Access Control & Identity Management Security Services & Risk Management
What if your biometrics, now embedded in devices, workplaces, and airports, promising seamless access and enhanced security, was your greatest vulnerability in a cyberattack? Cybercriminals are focusing on knowing where biometric data is stored.

Read more...
Strategies for combating insider threats
Information Security Security Services & Risk Management
In Africa, insider threats pose an increasingly significant risk to businesses, driven by economic uncertainty, labour disputes, and rapid digital transformation. These threats can arise from various sources, including disgruntled employees and compromised third-party service providers

Read more...