nya-security-risk-management.pdfVIP专享VIP免费原创优质

SECURITYRISKMANAGEMENTCOMMITTEDGLOBALEXPERTISECOMMITTEDGLOBALEXPERTISESince1990wehavebeencommittedtohelpingclientsunderstandthethreatstotheirpeople,information,propertyandreputation.Ourglobalteamprovidesyouwiththeexpertisetomitigateandmanagesecurityriskssothatyoucanfocusonopportunitiesandmeetobjectives.COMMITTEDWedeveloplong-term,collaborativeclientpartnerships,thatputyouingreatercontrol.Ourcommitmenttoanimmediateresponsewhenyouneedusofferscertaintyandpeaceofmind.GLOBALWeareaglobalteamthatprovidesalocalservice.Withextensiveresourcesonthegroundaroundtheworld,weunderstandyourcultureandspeakyourlanguage.EXPERTISEWeattractanddevelopthehighest-calibreofspecialists.Ourteamhaswideexperienceoftheevolvingchallengesfacedbyeveryindustrysectoraroundtheworld.OURVALUESOursecurityriskandcrisismanagementconsultingmethodologyisfoundedoninternationalbestpracticestandards.2THREATASSESSMENT7MONITORANDREVIEW3VULNERABILITYASSESSMENT6RISKTREATMENT4CONSEQUENCEREVIEW1CONTEXT&ASSETIDENTIFICATION5RISKASSESSMENTHOWDOWEHELP?AGLOBALSERVICEDELIVEREDLOCALLYContext&AssetIdentificationWestartbygainingadetailedunderstandingofyourorganisation,itsstructure,criticalassets,cultureandapproachtorisk.1ThreatAssessmentNYA24andourexpertlocalteamsprovideaclearpictureoftheprevalentthreatsfrominsidersand/oroutsiders.Thisintelligence-ledapproachensuresyougainacomprehensiveandaccurateunderstandingofanyadversariesyouneedtoprotectagainst.2VulnerabilityAssessmentThenextstepistoidentifyandquantifyvulnerabilities.Welookindetailattheeffectivenessofthesecuritysystemprotectingyourassets,examiningitforanyweaknessesthatanadversarycouldexploit.Thismayinvolvereviewingaphysicalsite,digitalsecuritysystems,travelprocessesoranindividual’sroutine.3ConsequenceReviewWhatwouldbetheimpactofalosseventoccurring?Havingdeterminedthepotentialforsomethingtogowrong,wehelpyouanalysewhattheconsequenceswouldbetoyourbusinessobjectivesifitdid.Fromthis,youcanidentifyrisks.4RiskAssessmentYoucanthendecidewhichrisksareoutsideyourrisktoleranceandthereforeneedtobeaddressed.Thisalignstoanywiderenterpriseriskmanagementprocessandenablesclearreportingtoseniormanagement.5RiskTreatmentThenextstageisthedevelopmentofanactionableplanthatspecifiesadditionalcontrolsthatneedtobeimplemented,whoisresponsibleforthem,whatthedeadlinesareandwhatresourcesarerequired.6MonitorandReviewAsyourorganisationanditsoperatingenvironmentevolve,weworkalongsideyoutoensurethatyoursecurityriskmanagementprocessremainscurrent,fitforpurposeandfinanciallysound.7OURAPPROACHFollowingourmethodology,wescopedtheorganisation’sstructure,riskappetiteandcriticalin-countryassetsNYA24andlocalexpertsprovidedanin-depthunderstandingofthecurrentandlikelyfuturethreats,aswellastheorganisation’svulnerabilitybasedondetailedsitesurveysOurriskassessmentenabledprioritisationofrisktreatmentoptions,designedtoreduceriskstoanacceptablelevelandalleviatelocalconcernsWesupportedtheimplementationandongoingmonitoringofriskmitigationmeasuresincludingtheprovisionofembedded,in-countrysecuritymanagersDELIVERYAsecurityriskregisteralignedtotheorganisation’swiderenterpriseriskmanagementframeworkAcentralisedsecurityriskmanagementpolicyandplanaswellasguidanceonincidentandcrisismanagementplanningAdemonstrablereductioninoperatingriskswithaquantifiablereturnoninvestment(ROI)whichsatisfiedtheBoardAclearBestPracticesecurityriskmanagementprocesswhichcouldbereplicatedacrosstheorganisation’sglobaloperationsAnorganisationwithglobaloperationsandahigh-profilebrand,workinginmultiplecountriesincludingseveralcomplexenvironmentsTheorganisation’sapproachtosecuritywasad-hoc,withnocentralisedpolicyorapplicationofconsistentglobalstandardsAnincidentinoneoftheorganisation’shigher-risklocationswascausingsignificantconcernamongstexpatriateworkersandhadalertedtheBoardtosecurityrisksCASESTUDYRiskAssessment–CorporateReviews–ThreatAssessments–SiteSurveys–RiskAssessment/TreatmentTraining–PersonalSecurityAwarenessTraining–HostileEnvironmentAwarenessTraining–SecurityManagementTraining–IncidentManagementTraining/SimulatedIncidents–eLearningEmbeddedAdvisors–StrategicLevel–RegionalManagementLevel–Site/GroundLevelDueDiligenceExpertWitnessPolicyandDocumentation–SecurityRiskManagementPolicies–SecurityManagementPlans–SiteandSecurityStaffSOPs–EmergencyManagementPlansTravelRiskManagement–TravelRiskManagementReview–ProgrammeDevelopment–TravellerSecurityReports–FirstLineResponse–Tracking–GroundServicesInformationandIntelligenceWHEREDOWEHELP?COMMITTEDGLOBALEXPERTISECONTACTUSNEWYORK77WaterStreetNewYork,NY10005UnitedStatesLONDON40LimeStreetLondonEC3M7AWUnitedKingdomSINGAPOREOneRafflesPlaceTower11RafflesPlaceSingapore048616Singaporenyarisk.com