2. SOLUTION AND COUNTERMEASURE SELECTION The whole idea of security is to understand risks. Risks are created by potential threats which exploit vulnerabilities and the purpose of security is to put in place measures to counter the potential threats (what we call countermeasures). At G4S, we believe there are three broad types of solutions and countermeasures in an integrated security programme: Expertise - Risk Services AWARENESS | POLICIES | PROCEDURES | BEHAVIOR | INTELLIGENCE | CONSULTATION | DESIGN Security Professionals - People Services INTERACTION | PRESENCE | PREVENTION | RESPOND | MANAGE | COMMUNICATE | ACT | OPTIMISE | INSTALL & MAINTAIN Technology & Data Analytics - Technology & Data Services SYSTEMS | PRODUCTS | SOFTWARE | INTEGRATION | ANALYTICS | DETECTION | DELAY Through a Risk-Based Approach, you are able to identify countermeasures more effectively. Our Risk-Based Approach is built upon three fundamental questions: What do you need to protect? Identify the most valuable assets to be protected What do you need to protect it from? Identify the most likely risk to the assets How do you most effectively protect it? Identify the most effective solutions to mitigate the risks The answers to these questions give us all the drivers for risk. By understanding all the drivers we are then better able to design solutions from the most appropriate mix of countermeasures to mitigate risk. Good security needs to be intelligent and proportionate. Inadequate security will leave sites exposed to intolerable risks, while excessive security is expensive, restrictive , and oftentimes ineffective. Appropriateness is normally measured in two dimensions: effectiveness and cost. However, it would be more apt to measure effectiveness AND enhanced value, the ability to manage risk and drive compliance. 2
Download PDF fil