Identifying of risk when conducting risk management surveys for a client is comparatively straight-forward if the expert have a sound history of operating in a security focussed organisation and having conducted an array of both planned and dynamic assessments. Experience gained will build up versatility and a knowledge-base to draw on when 'the out of the ordinary' are faced, as they frequently do. Whilst there are numerous books and courses offering comprehensive resources pertaining to risk management, I think that above all, experience has no equal in this special area and when backed up by up to date guidance and techniques, will result in a credible end-product, adding much value to the organisation's operations.
The risk management advisor must be well read as a minimum about the area in which the task is focused and have a pretty good working knowledge of the region. Planning for the task must happen ahead and should ideally include, as a matter of priority, a thorough statement of requirement from the customer. This should negate any confusion relating to expectations. The risk management specialist should make sure that induction and introductory briefings pertaining to the customer organisation is undertaken so as to completely understand the client. As an absolute minimum I would recommend the following as essential prior to commencing the work:
Understand the organisation and what they do. Understand where they operate, are looking to operate and the duration. Know what assets the operation involves - staff, equipment, real-estate. Understand the organization's expectancies - statement of requirement.
Knowledge of the above will give the consultant with a useful' Know Your Customer Folder' in order to plan and make initial preparations but more should follow. Research about the customer organisation should also include any history of issues encountered during, or as a result of, other operations and ventures. This is of importance when calculating the risks especially if hostile actions followed. As an example, if the population of an area might have objected to certain aspects of an operation within their area or does the organisation have a 'reputation' which has followed them and is the operation being undertaken by the customer controversial in any way?
The value of local data is invaluable and having the opportunity to engage with knowledgeable locals frequently provides information critical to the task which may otherwise be missed. Take the opportunity, should it come up, to talk about matters with influential and well placed local members of the population. It has furnished me many times over with a precise indication concerning future development of issues. Additionally, it leads to relationship forming with locals and perhaps even local authorities like the Police which is useful.
Be systematic and thorough in your risk management survey. Whereever it is possible prove the information that you are handing over to your . Take photographs, drive routes, visit areas and test, test, test! Your customer is paying for a service and expects credible and factual results and that includes furnishing him with any 'bad news' where it is highlighted.
To summarise: A well planned, well conducted and well-presented risk management survey is potentially of critical importance to your customer. Failing to plan is planning to fail and your paying customer deserves the best from his consultant's endeavours.
The risk management advisor must be well read as a minimum about the area in which the task is focused and have a pretty good working knowledge of the region. Planning for the task must happen ahead and should ideally include, as a matter of priority, a thorough statement of requirement from the customer. This should negate any confusion relating to expectations. The risk management specialist should make sure that induction and introductory briefings pertaining to the customer organisation is undertaken so as to completely understand the client. As an absolute minimum I would recommend the following as essential prior to commencing the work:
Understand the organisation and what they do. Understand where they operate, are looking to operate and the duration. Know what assets the operation involves - staff, equipment, real-estate. Understand the organization's expectancies - statement of requirement.
Knowledge of the above will give the consultant with a useful' Know Your Customer Folder' in order to plan and make initial preparations but more should follow. Research about the customer organisation should also include any history of issues encountered during, or as a result of, other operations and ventures. This is of importance when calculating the risks especially if hostile actions followed. As an example, if the population of an area might have objected to certain aspects of an operation within their area or does the organisation have a 'reputation' which has followed them and is the operation being undertaken by the customer controversial in any way?
The value of local data is invaluable and having the opportunity to engage with knowledgeable locals frequently provides information critical to the task which may otherwise be missed. Take the opportunity, should it come up, to talk about matters with influential and well placed local members of the population. It has furnished me many times over with a precise indication concerning future development of issues. Additionally, it leads to relationship forming with locals and perhaps even local authorities like the Police which is useful.
Be systematic and thorough in your risk management survey. Whereever it is possible prove the information that you are handing over to your . Take photographs, drive routes, visit areas and test, test, test! Your customer is paying for a service and expects credible and factual results and that includes furnishing him with any 'bad news' where it is highlighted.
To summarise: A well planned, well conducted and well-presented risk management survey is potentially of critical importance to your customer. Failing to plan is planning to fail and your paying customer deserves the best from his consultant's endeavours.
About the Author:
Craig Jones is the M. D of Advanced Training and Security Solutions Limited, an independent company established to provide a bespoke security and resilience service. Craig has worked for several organizations in a variety of roles. ATSS are based in Cheshire, United Kingdom with a presence in London and a worldwide reach. They have experience with working in the Middle East, North Africa and Eastern Europe. Graig is a keen author of articles concerning risk assessment, emergency planning, business continuity and security management.
No comments:
Post a Comment