by Wolfgang W. Ziegler, CPP, PCI, CHS-III

     This article was published in The Productivity Institute (PI) Newsletter

When was your last comprehensive Risk or Threat Assessment?  Nine times out of ten, one was never done, or if one was, it’s by an insurance company for a new or updated policy, but very limited in scope. So cameras are installed, monitoring and/or recording devices are upgraded and new network infrastructure is put in place, something that makes everyone feel better and they can point to. But, it really doesn’t do anything to provide significantly increased security or protection for the money you spent.  Nor does it cover the area which was just used as an entry point for a thief, be it physical or virtual.

In today’s economic climate everyone and every item needs to earn their keep. Companies spend millions on hiring and background checks to make sure they get the right person on the first try. The same should be done when trying to determine what your business really needs or doesn’t need in terms of a security infrastructure. Create a threat baseline. A vendor neutral security professional performs interviews, observes business operations, monitors traffic, and creates a threat baseline for your business.  A business armed with this report not only has a document to refer to, but also shows good intentions, prior planning and sustains “reasonable” standards should litigation arise. After the assessment, the business owner or officers decide what measures are to be taken. If cost hampers further action, they will be aware of what areas require extra vigilance. If solutions are sought, the information can be used to optimize any equipment purchases from specific vendors. The subsequent placement, operation of that equipment, and optimal utilization during its life cycle will be maximized in minimum time.         

A business, company, or organization is basically not much different than a person. If a person feels ill, they usually go through a cycle of home remedies leading to visits from one doctor to another. How do you determine if it is just a minor ache or a full-blown illness? Where do you start, who do you go to first?  This process wastes potentially invaluable time and resources, leading to frustration and overall lack of productivity. Had that person gone to a quality integrated medical provider, they would have gotten a head-to-toe evaluation in a short period of time. The standard of treatment is to evaluate all information to get a proper diagnosis, rather than treating one isolated symptom. This would be done by experts like the security professional who is not vendor specific, rather than a generalist. For example, a person with foot problems may spend years, going from doctor to doctor. Had he gone for an whole body evaluation, (Risk or Threat Assessment) he may have found out in days it was due to diabetes, thus saving himself (the company) years worth of damage due to neglect (improper allocation of security budget).

In today’s hostile world, equipment, manpower, and a lot of money is spent on temporary, feel-good band-aids and crutches, in the hope it will magically do something or be something it’s not. Business survival, like any survival situation, requires a calm, educated assessment of your environment, using your limited resources to gather the most knowledge, and insight to move forward.

Wolfgang W. Ziegler, CPP, PCI, CHS-III, is an internationally recognized expert in corporate counter-terrorism and risk mitigation.  With over 20 years of experience, he has worked with both the public and private sector as strategic counsel and tactical leader for complex risk assignments. Proficient in four languages (English, Spanish, German and Mandarin), Mr. Ziegler has earned over 15 prestigious accreditations, including the much sought-after Certified Protection Professional designation.  Mr. Ziegler also serves as a member of the Society of Competitive Intelligence Professionals, the American College of Forensic Examiners International and the American Society of Industrial Security International.  Mr. Ziegler can be reached at: wziegler@ag-research.com.