Risk Management - the professional’s choice

1. Risk Management- the professional’s choice Presenter: Benedict N. Weaver M.A. (Oxon) CPP

2. definition types matrix audit conclusion

3. “Risk Management is the process by which a company identifies its potential losses and takes steps to avoid or reduce them” J. Kirk Barefoot CPP

4. eliminate risk • difficult • cost effective

5. transfer risk -insurance - expensive

6. retain risk  unreimbursed loss  costly

7. control risk • management responsibility • input from security • cost effective

8. the domino effect

9. typically… reactive expensive ineffective

10. master plan identify vulnerabilities categorise criticality  strategy • complementary • supportive

11. holistic

12. security master planning • understand broad picture • analyse all needs • plan based on results

13. what is the business? description of the organisation competition organisation’s plans

14. asset identification • vital • important • secondary

15. threat assessment • history of losses • insurance claims • security records • safety claims • law enforcement

16. vulnerability analysis list of assets  points of attack  scenarios

17. security measures to channel resources to protect your most vital assets against the most probable threats

18. such measures include… • policies and procedures • electronic systems • physical barriers • security personnel

19. policies and procedures • accounting systems • computer security • drug and alcohol abuse • emergency planning • information classification

20. electronic systems  deny  deter  delay  detect

21. physical barriers • fences • hardened portals • vehicle barriers • bullet resistant materials

22. uniformed personnel • legalistic • service oriented • combination

23. conclusion • risk analysis • establish priorities • balanced approach • positive