商务风险管理指南：如何维护安全.pdf

11 On Your Guard: How to Maintain Security ‘They aren’t worth fixing,’ says the repair man. ‘They’re all smashed up. You can see where the thieves ripped out the tubing, the condenser coils, all that copper.’ The air conditioners are looking a mess, and the cost of replacement will run into tens of thousands . Geoff, the head of security, says the thieves must have got up on to the flat roof via the fire escape. ‘The police probably won’t even ask the scrap merchants; the components are impossible to trace,’ he says. ‘But in future, we could try painting their replacements, illuminate them at night, and put them in a locked cage,’ he says . ‘Which?’ says his assistant, ‘The units or the thieves?’ What are Security Risks, and What Damage Can They Cause? The company’s buildings, stock, staff and assets are at risk from thieves, vandals, arsonists or even extortionists. Some organizations can easily achieve tight security. But others, such as hospitals, have to be accessible to the public, and are often regarded as ‘free supermarkets’ by thieves who routinely walk away with handbags and computers. For all kinds of companies, security is a complex issue. The assets to be protected now include computer data and intellectual property (IP). For companies with a high profile or overseas operations, security can be a life and death matter, with kidnap and ransom being a real possibility. Conducting a Security Review The security process starts with a security review (as in Table 11.1). This entails checking the current security arrangements and assessing the areas of vulnerability. Table 11.1 Security review Devising a Security Strategy Once you have completed the security review, you can devise a security strategy. Every set of premises is different, so each property needs an individual strategy. The strategy should operate at several levels, as shown in Figure 11.1. 1. The outermost level is the perimeter, together with the