Proficient operational security management

September 2019 Security Services & Risk Management

The quest to establish an organised and integrated security operations programme based on a Plan-Do-Check-Act (PDCA) cycle for continuous improvement is paramount for a successful security operation. A PDCA framework establishes efficiency, implementation, monitoring, reviewing and improvement and is critical, whether you are in the security service sector, an in-house practitioner or need comfort that your service partner is performing to agreed standards.

The security operations programme is an ongoing governance process, supported by top management and resourced to ensure the necessary steps are taken for a successful security programme. To this end, security managers should analyse critically what the key contributory factors are to the core business which they protect. This will clarify their role to ensure that the business objectives are achieved.

Once this process is complete, the first critical success area (CSA), namely ‘leadership’, can be established. This CSA will define the security strategy, policy, code of conduct and mission.

The second CSA is ‘people’. The security function can never be successful without competent and willing teams. The direction of the team is entrenched through clearly defined objectives. At this point of designing the programme, the notion and structure of your human resources must follow strategy to provide a clear picture of how the team should be comprised. A host of subset elements provide further criteria for this CSA.

The third CSA is ‘operations’. This is the heartbeat of the integrated programme. Every sub-category is actively involved with the proactive approach to risk mitigation, prevention of crime and ultimately the protection of assets.

‘Assurance’ and ‘quality’ make up the fourth leg in this process. Too often, good procedures, processes and other control parameters are implemented; however, the wheel of surety is not complete unless the processes have been subjected to oversight inspections and audits to establish the real value addition to the organisation, and consequently the success of the programme as a whole.

The fifth CSA is ‘technology’ in various forms and is in demand in modern security. This is crucial, especially if the planned programme demands proactive measures for crime prevention. However, the primary measurements from such systems must not only satisfy proactive measures, but also demonstrate the ability to report leading indicators rather than lagging these indicators.

In the world of the security owner, manager or advisor, the ability to provide security services not exceeding budgeted costs is key for success. The sixth CSA therefore addresses ‘costs’. Regular Lean Six Sigma approaches to all security processes identify the main elements of waste. This is coupled with key expenditure to ensure ALARP (as low as reasonably practicable) spend is achieved.

Finally, the seventh and equally crucial CSA is ‘investigation’ and ‘surveillance’. This area in the programme provides constant information for key decision makers to decide the proactive direction of the programme. This includes control room management as well as the direction and command of frontline offices.

Each CSA should be equipped with a primary metric for performance management; each metric is then measured and performance compliance discussed.

An integrated security management programme should be seen as a process of continuous improvement. The owners, management and leaders should constantly review the efficiency of the programme and make adjustments suitable to their business objectives and needs.

For more information contact Kevin van Zyl, Horizon Risk Solutions, +27 76 801 5639, [email protected]

Kevin van Zyl.
Kevin van Zyl.

Kevin van Zyl is the managing director of Horizon Risk Solutions. He has been successful in the implementation of a programme based on the above principles since 2013. The programme has made positive change to management teams as well as the greater security operation, ultimately contributing to the success of the core business.





Share this article:
Share via emailShare via LinkedInPrint this page



Further reading:

Boost revenue streams for MNOS
News & Events Security Services & Risk Management Financial (Industry)
ReveNet has introduced its new solution, designed to safeguard and potentially boost revenue streams in an increasingly challenging landscape for MNOS. The new platform combines advanced analytics and is built on trust, transparency, and sustainability principles.

Read more...
Risk-IO manages mining security risks
Security Services & Risk Management Mining (Industry)
[Sponsored] A local mining company with three large operations experienced increased security costs. The liability included no standardised risk assessment, poor management of the efforts to mitigate hazards, and unauthorised access with subsequent theft. The reactive approach to security was not only expensive but also wasteful in the sense that the costs were poorly managed, and there were no metrics to show improvement or trends in incidents.

Read more...
NIS2 compliance amplifies skills shortages and resource strain
Information Security Security Services & Risk Management
A new Censuswide survey, commissioned by Veeam Software reveals the significant impact on businesses as they adapt to this key cybersecurity directive, with 95% of EMEA businesses siphoning other budgets to try and meet compliance deadline.

Read more...
SA company develops world-first safe K9 training for drug detection
Editor's Choice News & Events Security Services & Risk Management Government and Parastatal (Industry)
The Braveheart Bio-Dog Academy recently announced the results of its scientific research into training dogs to accurately detect drugs and explosives without harming either the dogs or their handlers.

Read more...
Understanding South Africa’s Cybercrimes Act
Information Security Security Services & Risk Management
The Cybercrimes Act No.19 of 2020 is a comprehensive legislative response to the evolving landscape of cyberthreats in South Africa. Its effectiveness, however, relies on enforcement, which relies on implementation, international cooperation, and collaboration between the public and private sectors.

Read more...
Partnership addresses fire hazard mitigation
Brigit Fire (a Division of Hudaco Trading) Elvey Security Technologies Fire & Safety Security Services & Risk Management
Brigit Fire has partnered with the Elvey Group. The collaboration will see Brigit Fire distributing both the advanced C-TEC addressable fire detection systems (CAST Technology) and GreenMist lithium extinguishers.

Read more...
Fire protection for a solvent extraction plant in Africa
FS Systems Fire & Safety Security Services & Risk Management Mining (Industry)
A prominent mining site operates a state-of-the-art solvent extraction (SX) plant, integral to separating and purifying metals from ores, which pose significant fire risks, as SX processes involve highly flammable organic solvents and elevated operating temperatures.

Read more...
Taking fire safety seriously
G2 Fire Editor's Choice Fire & Safety Security Services & Risk Management
To gain insights into how fire systems must be designed, installed and maintained, SMART Security Solutions asked Nichola Allan, MD of G2 Fire, for some insights into the local fire market.

Read more...
New data privacy trends increase large cyber claims
Security Services & Risk Management News & Events
Frequency and value of sizeable cyber insurance claims up 14% and 17% year-on-year in the first half of 2024, with a growing trend in the US for litigation against large corporations related to privacy violations.

Read more...
Streamlining and securing enterprise risk management
Security Services & Risk Management
[Sponsored] A new enterprise risk management web app from Zulu Consulting, called Risk-IO, is designed to automate and streamline the enterprise risk management process, ensuring no steps are skipped and everything is securely documented.

Read more...