The Impact of Security Operations Management in Risk Management
•
1 like•1,360 views
Private security operations perform an important role in protecting state and non-state clients engaged in relief, recovery, and reconstruction efforts; commercial business operations; development activities and diplomacy. The Security Operations Management is applicable for any type of organization conducting or contracting security operations, particularly in environments where governance might be weak, or the rule of law undermined due to human or naturally caused events. This means that organizations engaging in security operations manage the utilization of tactics, techniques, procedures, and equipment, in such a way as to achieve both operational and risk management objectives. The link between Security Operations Management (SOM) and Enterprise Risk Management (ERM) is underestimated and we will explore this during the webinar. Main points covered: • Organizational Context • Leadership • Planning • Operations in support of law enforcement • Incident management • Performance evaluation • Internal audit Presenter: Our presenter for this webinar is Mr. Nico Snyman, a distinguished international expert in Enterprise Risk Management, Framework & Assessments, a frequent conference speaker and Founder and Chief executive Officer of Crest Advisory Africa, a company specializing in Corporate Governance, Risk Management, BCM and Internal Audit.
Recommended
More Related Content
What's hot
What's hot (10)
Similar to The Impact of Security Operations Management in Risk Management
Similar to The Impact of Security Operations Management in Risk Management (20)
More from PECB
More from PECB (20)
Recently uploaded
Recently uploaded (20)
The Impact of Security Operations Management in Risk Management
- 2. Table of Contents 2Copyright Crest Advisory Africa (Pty) Ltd: 2018 • Introduction • Definitions • Internal and External Stakeholders • Clashes with Stakeholders (Case Study) • Human rights and Risk Management (ERM & Security) • Use of force • Subcontractor management (Anti Corruption) • Internal audit of Security environment • Questions
- 3. Introduction: Nico snyman 3Copyright Crest Advisory Africa (Pty) Ltd: 2018 • Was a high ranking policemen, serving in the pre-apartheid regime within the Policing Intelligence services (Covert Operations) and in 1998 was appointed as Brigadier in the Meadowlands area of Soweto (Overt Policing). Managing a community of over 500 000 people • In 2007 I was appointed as the Executive (Risk and Security) for the Gautrain Construction project, the biggest project globally between 2007 and 2011. • In 2009 I was appointed the Executive for Risk and Security to Operate this Rapid Transport system till 2013 • 2014 established Crest Advisory Services, specialising in Risk (ISO 31000), Internal Audit (ISO 19011), Compliance (ISO 19600), Business Continuity (ISO 22301) and Quality (ISO 9001)
- 4. Definitions 4Copyright Crest Advisory Africa (Pty) Ltd: 2018 • Security (ISO 18788) • condition of being protected against hazards, threats, risks (3.50), or loss • Risk (ISO 73, 31000) • effect of uncertainty on objectives (3.33) • Objectives (ISO 18788) • result to be achieved
- 5. Internal Context (ISO 73) 5Copyright Crest Advisory Africa (Pty) Ltd: 2018 Internal environment in which the organization seeks to achieve its objectives • governance, organizational structure, roles and accountabilities; • policies, objectives, and the strategies that are in place to achieve them; • the capabilities, understood in terms of resources and knowledge (e.g. capital, time, people, processes, systems and technologies); • information systems, information flows and decision- making processes (both formal and informal); • relationships with, and perceptions and values of internal stakeholders; • the organization's culture;
- 6. external Context (ISO 73) 6Copyright Crest Advisory Africa (Pty) Ltd: 2018 External environment in which the organization seeks to achieve its objectives NOTE: External context can include: • the cultural, social, political, legal, regulatory, financial, technological, economic, natural and competitive environment, whether international, national, regional or local; • key drivers and trends having impact on the objectives of the organization; and • relationships with, and perceptions and values of external stakeholders
- 7. Security and enterprise risk 7Copyright Crest Advisory Africa (Pty) Ltd: 2018
- 8. Clashes with Stakeholders • Marikana (South Africa) • North Mara (Tanzania) – Clashes – Deaths – Killings (Research) • Hospitals – Shocking robbery at health center – Emergency Services 8Copyright Crest Advisory Africa (Pty) Ltd: 2018
- 9. Investors Confidence • Barrick investors find it tough to stay positive – Commercial Export Ban on all gold concentrate out of Tanzania – Localization • Marikana – Violent scenes at the Lonmin Marikana mine could shake investor confidence. Analysts are warning that if it's not nipped in the bud, long term implications for the economy will be bad. (You Tube) – 18% decrease in share prices, billions lost 9Copyright Crest Advisory Africa (Pty) Ltd: 2018
- 10. Human rights protection (1) • establish and maintain a transparent governance and management framework in order to deter, detect, monitor, address ,and prevent the occurrence and recurrence of incidents that have adverse impacts on human rights and fundamental freedoms; • identify and operate in accordance with applicable international, national and local laws and regulations; • conduct comprehensive internal and external risk assessments associated with safety, security and human rights risks; • implement risk control measures that support the rule of law, respect human rights of stakeholders, protect the interests of 10Copyright Crest Advisory Africa (Pty) Ltd: 2018
- 11. Human rights protection (2) • the organization and its clients, and provide professional services; • ensure suitable and sufficient operational controls based on identified risks are implemented and managed to enhance the occupational health and safety and the welfare of persons working on behalf of the organization; • effectively with public and private stakeholders; communicate and consult • conduct effective screening and training of persons working on the organizations behalf; 11Copyright Crest Advisory Africa (Pty) Ltd: 2018
- 12. Human rights protection (3) • ensure that the use of force is reasonably necessary, proportional and lawful; • conduct performance evaluations of services rendered and the achievement of objectives; • develop and implement systems for reporting and investigating allegations of violations of international law, local law or human rights, as well as mitigating and remedying the consequences of undesirable or disruptive events. 12Copyright Crest Advisory Africa (Pty) Ltd: 2018
- 13. 7 Indicators of Voluntary principles on security & Human Rights (VRSHR) 13Copyright Crest Advisory Africa (Pty) Ltd: 2018 Cat Description 1 Labor and working conditions 2 Indigenous peoples (Localization) 3 Economic, social and cultural rights 4 Environment and health and safety 5 Land rights 6 Security 7 Anti-corruption
- 14. Recommendations from VPSHR • Due diligence, including human rights–related due diligence, on new and renewing vendors, and self-certification of a Supplier Code of Ethics; • Investigations and audits of contractors where complaints are lodged (including complaints by contractor employees); • Dismissing contractors who fail to comply with the policies or the law; • A risk assessment in the supply chain; • Environmental monitoring, along with policies, procedures and a management system that includes audits and assessments; and • Enhanced human resources policies, procedures and training related to sexual harassment and discrimination more generally. 14Copyright Crest Advisory Africa (Pty) Ltd: 2018
- 15. Use of force continuum 15Copyright Crest Advisory Africa (Pty) Ltd: 2018
- 16. Use of Force Continuum (1) 16Copyright Crest Advisory Africa (Pty) Ltd: 2018 Force Option Description Defence and Control Technique 1 Officer presence in Uniform 2 Verbal commands/cooperativ e controls • Compliance Holds • Pressure Point Control Tactics • Escort Technique • Light Subject Control • Above Could be applied with or without Tonfa Baton or other Impact Instruments 3 Empty-hand submission techniques • PPCT – Pressure Point Control Tactics, Control Tactics, techniques – a level of force that has a low probability of causing soft connective tissue damage or bone fractures. This would include joint manipulation techniques, applying pressure to pressure points and normal application of hand- cuffs
- 17. Use of Force Continuum (2) 17Copyright Crest Advisory Africa (Pty) Ltd: 2018 Force Optio n Description Defence and Control Technique 4 Hard control Techniques/Agressive response techniques • the amount of force that has a probability of causing soft connective tissue damage or bone fractures or irritation of the skin, eyes, and mucus membranes. This would include kicks, punches, stuns and use of aerosol sprays such as oleoresin capsicum (OC) pepper spray. Some models split these techniques between empty hand, soft control and intermediate weapon techniques but only include 5 levels of the continuum 5 Intermediate weapons • an amount of force that would have a high probability of causing soft connective tissue damage or bone fractures. (e.g. expandable baton, baton, pepper spray, Taser, beanbag rounds, rubber fin stabilized ammunition, Mace (spray), police dogs, etc.) Intermediate weapon techniques are designed to impact muscles, arms and legs, and intentionally using an intermediate weapon on the head, neck, groin, knee caps, or spine would be classified as deadly or lethal force 6 Lethal force / Deadly force • a force with a high probability of causing death or serious bodily injury. Serious bodily injury includes unconsciousness, protracted or obvious physical disfigurement, or protracted loss of or impairment to the function of a bodily member, organ, or the mental faculty. A firearm is the most widely recognized lethal or deadly force weapon, however, an automobile or weapon of opportunity could also be defined as a deadly force utility
- 18. Supply Chain Contractor Mapping 18Copyright Crest Advisory Africa (Pty) Ltd: 2018
- 19. Enables to ask the right questions 19Copyright Crest Advisory Africa (Pty) Ltd: 2018
- 20. Reporting with confidence 20Copyright Crest Advisory Africa (Pty) Ltd: 2018
- 21. Competency and training 21Copyright Crest Advisory Africa (Pty) Ltd: 2018
- 22. Risk based Internal audit on security operations 22Copyright Crest Advisory Africa (Pty) Ltd: 2018 • Critical competence on security • Need to know: • Technical environment • Knowledge and skills regarding the range of systems available for implementation • Security Technology is the fastest growing industry globally, keep current and relevant. • Operational Environment (Context) • Security Principles • Crime Prevention through Environmental design (CPTED) • Zero Tolerance Approach • Broken Window Principle
- 23. ISO 31000 Training Courses • ISO 31000 Introduction 1 Day Course • ISO 31000 Foundation 2 Days Course • ISO 31000 Risk Manager 3 Days Course • ISO 31000 Lead Risk Manager 5 Days Course Exam and certification fees are included in the training price. www.pecb.com/en/education-and-certification-for-individuals/iso-31000 www.pecb.com/events
Editor's Notes
- Marikana On 16 August 2012, the South African Police Service (SAPS) opened fire on a crowd of striking mineworkers at Marikana, in the North West Province. The police killed 34 mineworkers, and left 78 seriously injured. Following the open fire assault - 250 of the miners were arrested. North Mara Police killed 65, injured 270 at Barrick mine in Tanzania, inquiry hears Deadly clashes continue at African Barrick gold mine Brussels On the morning of 22 March 2016, three coordinated suicide bombingsoccurred in Belgium: two at Brussels Airport in Zaventem, and one at Maalbeek metro station in central Brussels.[11] Thirty-two civilians and three perpetrators were killed, and more than 300 people were injured. Another bomb was found during a search of the airport. Islamic State of Iraq and the Levant (ISIL) claimed responsibility for the attacks.[12] The perpetrators belonged to a terrorist cell which had been involved in the November 2015 Paris attacks. The Brussels bombings happened shortly after a series of police raids targeting the group. The bombings were the deadliest act of terrorism in Belgium's history. The Belgian government declared three days of national mourning. Hospitals SICK people were held up at gunpoint and robbed by assailants pretending to be patients at the Hanover Park Community Health Centre on Monday night. The Department of Health has now asked the community for assistance to ensure a safe environment at its facilities. Patients at the hospital were robbed of their belongings at gunpoint by suspects who pretended to be seeking medical attention. The department said four security personnel were on duty – at the main entrance, patrolling the fence and surrounding areas – when five people came in for medical attention. They were searched and no weapons were found. Shortly thereafter a witness, who asked not to be named, said the suspects, one of them with a gun, ran through the waiting room robbing people. Provincial Health Department spokesperson Monique Johnstone said the CCTV footage showed an unidentified object being thrown over the wall. Johnstone said the department viewed criminal attacks on staff and clients as an extremely serious matter, and extensive engagements were ongoing with police, Community Police Forums (CPF) and other safety organisations. “We cannot confirm how many people were robbed at the time or what items were stolen during the incident as we are waiting on the police report,” she said. Johnstone said the hospital had experienced a similar incident in August 2015. “The facility does not turn away people seeking health care, and it is most unfortunate and disturbing that criminals prey on those who are in real need of the service,” she said. The incident came hours after Health MEC Nomafrench Mbombo launched the Operation Khuseleka campaign at Tygerberg Hospital, which encourages co-operation among residents, the police, safety organisations and CPFs.
- https://icoca.ch/en/get-involved International Code of Conduct Organisation
- Voluntary Principles on Security and Human Rights (VRSHR) The third-party assessments tool used covers all potentially relevant human rights and hundreds of individual indicators. The tool focuses on seven (7) categories where extractive companies commonly face the prospect of causing, contributing to or being linked to negative human rights impacts: labor and working conditions; indigenous peoples; economic, social and cultural rights; environment and health and safety; land rights; security; and anti-corruption. Issues related to supply chain, third parties, and vulnerable peoples also are embedded throughout these seven categories. Each of the categories includes several sub-categories, composed of multiple individual indicators, which feed into a three-part question for the sub-category. These questions are: does management have a procedure to address the risk? What actions demonstrate that the procedure has been followed? Do stakeholders believe the company is respecting the human right at issue?
- Clause 4.1.4, ISO 18788