How to overcome the true security risk within an organisation

Where does the ‘true security risk’ lie within an organisation and how can we tackle this easily?

I have assessed, worked alongside, and observed many organizations over 16 years that have experienced risk through breaches of security being external and internal theft, loss of stock and equipment and misunderstandings from staff and suppliers which then in turn create risk and damage to a company large or small. However, within these organizational structures is one common denominator of the creation of risk which is the ‘induction method’.

The most critical and important procedure for new and even existing staff and contractors is the induction process. Many times this process is brushed over quickly or presented in a tedious manner which may include some token questions or interaction which after a short time is quite forgetful. The online inductions usually encourage people to conduct other activities while keeping one eye on the screen, and the honesty inductions where you say that you have completed it and will provide the proof when needed usually get placed aside in importance, or completed as quickly as possible without adequate assimilation of the information by the participant. This can all lead to misunderstandings, risk to the organisation, and unintentional security and safety breaches. This only equals liabilities to your business.

For example; I completed an induction process for a leading global company on line and within 5mins and the only important information I took away was where the entry and exit was located should there be an evacuation, however no content about the actual evacuation process. I was never asked if I actually completed this induction, nor was I questioned on the content, but I had access to almost the entire 20 story building.

The induction process needs to be remembered, it needs to capture and entertained, and it needs to highlight the importance of the induction which then benefits the person taking part in that induction and how it benefits the company.

Try this when revamping your induction process;

• Make it interesting with a good personable presenter who hits the main security and safety points in the first instance, then comes back to those points as examples throughout the process.
• Keep the induction within the shortest time period and focus on the information. you need to get across; for example around 20 – 40 mins.
• Provide interactive examples where each attendee can comment, ask, and also share their experiences, this brings more interest and thought to the induction.
• Do not overfill the room so that people can simply sit at the back and coast through the process.
• If you have slides then take as many words out as possible and let the pictures and colors do the talking, make those images captivating and engaging.
• Conduct Q and A throughout the process and especially at the end in the form of either a completion between people or groups, or picking people in no particular order and quizzing them on questions.
• Refresh all staff and contractors each 6 – 12 months
• Keep accurate records of who was inducted and when so that you know you may need refreshers on any changes immediately.
• Make it fun!
• Make it engaging!
• No matter how boring you think the induction information is you can make it interesting!

The induction that people remember is another form of security risk management, it is a simple way to decrease risk and liability through people remembering more and then practicing what they are taught immediately.