Identifying of risk when conducting risk management surveys on behalf of a customer is relatively straight-forward if the advisor have a sound history of operating within a security focussed organisation and having conducted a range of both planned and dynamic assessments. Experience gained will build up versatility and a knowledge-base to draw on when 'the out of the ordinary' are faced, as they regularly are. Whilst there are a great many publications and courses offering exhaustive resources regarding risk management, I think that first and foremost, experience has no equal in this special area and when supported by up to date guidance and techniques, will result in a credible end-product, adding value to the organisation's operations.
The advisor must be well read as a minimum regarding the area in which the task is focused and have a reasonably good working awareness of the area. Planning for the task must take place ahead and should include, as a matter of priority, a comprehensive statement of requirement from the customer. This ought to negate any confusion relating to client expectations. The specialist should make sure that induction and introductory briefings regarding the customer organisation is undertaken in order to understand the customer. As an absolute minimum I would suggest the following as necessary prior to commencing work:
Know the customer and what they do. Know where they operate, are aiming to operate and the duration. Know what assets the operation involves - staff, equipment, real estate. Understand the customer's expectancies - statement of requirement.
An awareness of the above will furnish the risk management consultant with a useful' Know Your Customer Folder' to plan and make initial preparations however much more should follow. Research about the client organisation should include any history of issues faced during, or as a result of, previous operations. This is of relevance when calculating the risks particularly if hostile actions followed. For example, if the population of an area may have objected to certain aspects of an operation within their region or does the organisation have a 'reputation' that has followed them and is the operation being undertaken by the client controversial in any way?
The value of local data is priceless and having the chance to engage with informed local people frequently provides data vital to the task that may otherwise be ignored. Take the opportunity, should it come up, to discuss matters with influential and prominent local members of the population. It has furnished me many times over with an accurate indication regarding future developments of issues. In addition, it leads to relationship-forming with locals and possibly even local authorities like the Police which is invaluable.
Be systematic and thorough in your risk management survey. Whereever it is possible prove the data that you are handing over to your . Take photographs, drive routes, visit locations and test, test, test! Your customer is paying for a service and expects credible and factual results and that obviously includes furnishing him with any 'bad news' if and when necessary.
To summarise: A well planned, well conducted and well-presented risk management survey is potentially of extreme importance to your customer. Failing to plan is planning to fail and your paying client deserves the best from his consultant's endeavours.
The advisor must be well read as a minimum regarding the area in which the task is focused and have a reasonably good working awareness of the area. Planning for the task must take place ahead and should include, as a matter of priority, a comprehensive statement of requirement from the customer. This ought to negate any confusion relating to client expectations. The specialist should make sure that induction and introductory briefings regarding the customer organisation is undertaken in order to understand the customer. As an absolute minimum I would suggest the following as necessary prior to commencing work:
Know the customer and what they do. Know where they operate, are aiming to operate and the duration. Know what assets the operation involves - staff, equipment, real estate. Understand the customer's expectancies - statement of requirement.
An awareness of the above will furnish the risk management consultant with a useful' Know Your Customer Folder' to plan and make initial preparations however much more should follow. Research about the client organisation should include any history of issues faced during, or as a result of, previous operations. This is of relevance when calculating the risks particularly if hostile actions followed. For example, if the population of an area may have objected to certain aspects of an operation within their region or does the organisation have a 'reputation' that has followed them and is the operation being undertaken by the client controversial in any way?
The value of local data is priceless and having the chance to engage with informed local people frequently provides data vital to the task that may otherwise be ignored. Take the opportunity, should it come up, to discuss matters with influential and prominent local members of the population. It has furnished me many times over with an accurate indication regarding future developments of issues. In addition, it leads to relationship-forming with locals and possibly even local authorities like the Police which is invaluable.
Be systematic and thorough in your risk management survey. Whereever it is possible prove the data that you are handing over to your . Take photographs, drive routes, visit locations and test, test, test! Your customer is paying for a service and expects credible and factual results and that obviously includes furnishing him with any 'bad news' if and when necessary.
To summarise: A well planned, well conducted and well-presented risk management survey is potentially of extreme importance to your customer. Failing to plan is planning to fail and your paying client deserves the best from his consultant's endeavours.
About the Author:
Craig Jones is the MD of Advanced Training and Security Solutions Ltd, an independent company established to supply a bespoke security and resilience service. Craig has worked for a considerable number of organizations in a variety of roles. ATSS have a base in Cheshire, England with a presence in London and a worldwide reach. They have experience with working in the Middle East, North Africa and Eastern Europe. Graig is a keen author of articles concerning risk assessment, emergency planning, business continuity and security management.
No comments:
Post a Comment