Reduce insider threats with thorough due diligence

Residential Estate Security Handbook 2019 Security Services & Risk Management

A recent press article discussed the ease of operating a business in the USA as opposed to in South Africa. One of the main issues was the ease with which staff could be hired and fired. In South Africa, our labour laws protect employees and this can sometimes create a financial headache for the company and can lead to the closure of the business.


Jenny Reid

As a result of this, many South African companies outsource their non-core business and this has led to the growth of the facility management companies in South Africa and the enormous contract security business.

Outsourcing critical business functions can offer significant opportunities, but can also represent a wealth of additional risks that may not only impact on the business’s bottom line, but on the company’s reputation as well. Vendor verification is essential to ensure that the validity and credibility of suppliers is confirmed.

Vendor verification is a screening and monitoring process which ensures that suppliers and third-party vendors meet specific guidelines of vendor risk management. The due diligence process ensures that your company has a consistent and practical way to screen all vendor relationships. This diligence must also be carried out throughout the relationship and not just in its initial stages to avoid any unpleasant surprises.

During the due diligence review, you will need to collect the following items from each vendor:

• CIPC documentation.

• Tax clearance certificate.

• List of references.

• Licence documentation – particularly PSIRA in the security industry.

• Company history (biographies of management and key personnel).

If your company hires suppliers on a regular basis, it will save time and money if you have a standard set of diligence review templates for each time you employ third-party vendors. The more you can automate the process, the easier it will be.

The main reason South African residential bodies create enclosed areas is for security reasons, and to avoid the necessary PSIRA registration they outsource their security. Unfortunately, often the body corporates do not have security expertise readily available and can be misled by the security company.

The benefit of introducing vendor verification in an organisation is that dishonest vendors will be less likely to approach you to engage in misconduct.

Ensure that you keep potential criminals at bay by managing your supplier relationships more proactively, in other words, from the start of the procurement process to the end of the relationship.


Credit(s)




Share this article:
Share via emailShare via LinkedInPrint this page



Further reading:

Keeping safety central to enterprise risk management
Zulu Consulting Security Services & Risk Management
[Sponsored] As employee safety becomes an ever-more critical aspect of corporate risk management, Risk-IO assists risk managers in ensuring a safe working environment, whether in an industrial setting, an office, or anywhere.

Read more...
Empower individuals to control their biometric data
Information Security Access Control & Identity Management Security Services & Risk Management
What if your biometrics, now embedded in devices, workplaces, and airports, promising seamless access and enhanced security, was your greatest vulnerability in a cyberattack? Cybercriminals are focusing on knowing where biometric data is stored.

Read more...
Strategies for combating insider threats
Information Security Security Services & Risk Management
In Africa, insider threats pose an increasingly significant risk to businesses, driven by economic uncertainty, labour disputes, and rapid digital transformation. These threats can arise from various sources, including disgruntled employees and compromised third-party service providers

Read more...
World-first safe K9 training for drug detection
Technews Publishing SMART Security Solutions Editor's Choice News & Events Security Services & Risk Management Government and Parastatal (Industry)
The Braveheart Bio-Dog Academy recently announced the results of its scientific research into training dogs to accurately detect drugs and explosives without harming either the dogs or their handlers.

Read more...
New firearms training modules from ITA
News & Events Security Services & Risk Management
The International Firearm Training Academy has launched two new firearms training modules to support career development in the firearms industry: the Maintenance Fitter and the Firearms Custodian modules.

Read more...
Empower individuals to control their biometric data
Information Security Access Control & Identity Management Security Services & Risk Management
What if your biometrics, now embedded in devices, workplaces, and airports, promising seamless access and enhanced security, was your greatest vulnerability in a cyberattack? Cybercriminals are focusing on knowing where biometric data is stored.

Read more...
Background checks: risk levels and compliance
iFacts Access Control & Identity Management Security Services & Risk Management
Conducting background checks is a vital step in the hiring process for employers or when engaging service providers; however, it is crucial to understand the legal framework and regulations governing these checks.

Read more...
On the ball or unaware
Technews Publishing Information Security Security Services & Risk Management
Whether an organisation is operating at a high level of information security maturity or has dangerous vulnerabilities that could put an entire business at risk, advanced, strategic penetration testing can uncover its true state of IT security.

Read more...
The bane of burnout
Editor's Choice Security Services & Risk Management
The World Economic Forum has recently formally acknowledged burnout as an occupational syndrome, giving it a status that is even more worthy of being taken seriously and resolved as quickly as possible.

Read more...
A winning combination for modern cybersecurity
Information Security Security Services & Risk Management
Companies are compelled to comply with legislative mandates and, more importantly, implement appropriate security measures for their customers and their most valuable asset – their data.

Read more...