Risk Management Associates

Think Small, Lose Big

John entered his office, dropped his bag on the floor, and began sifting through the piles of paper on his desk that never seemed to shrink. On top of the pile was the P/L from the previous month that he had been scrutinizing late the night before. He frowned as he noticed an entry for a payment to a vendor he did not recognize. As he looked through the reports before him, an uneasy thought began to creep into his mind. Was something wrong happening here? << MORE >>

Products for Sale

An employee comes to you and tells you that her uncle bought some of your company’s products at a very good price. The employee asks how he could make the purchase at less than the employee discount. That afternoon, you receive a call from the local police department. They report that some of your company’s products have been spotted at a local flea market, and they want to know if those sales are authorized.<< MORE >>

Traveling Technology

While traveling on company business, Bob uses a laptop containing company information. When he returned after his last visit, his laptop could not be found. He remembers using it in the airport, but he does not know where the laptop is now.<< MORE >>

Practical Considerations for Blast Mitigation

While it may be prudent to consider the possibility of high-yield bombing in considerations of building security on American campuses, it is also prudent to moderate assessments with a regard for threat probability. Creating permanently hardened structures is costly, and establishing permanent standoff zones can restrict property use needed for other purposes. All such considerations need to be based on a reality of the threat and the likelihood of an event occurring.<< MORE >>

The Basics of Computer Forensics

Although the type of information analyzed and produced in each case differs, the basic goal of computer forensics is to use proven software and procedures to gather and analyze data to create reproducible results. As with other scientific examinations, computer forensics requires the use of specialized tools and procedures that are standardized and consistent.<< MORE >>

Be Prepared to Stand Alone: Planning for Weather Related Emergencies

Weather related emergencies create an operational environment in which the security department may have to stand alone for minutes, hours, or days without significant assistance from outside agencies. Effectively planning for the continuity of security operations in such weather emergencies is essential to carrying out the overall security mission. << MORE >>

Preparing for the Ordinary Means Protection for the Extraordinary

When conducting a threat assessment of an electrical utility facility, a terrorist attack is considered a low probability event but potentially very critical. Notwithstanding, there is a definite correlation between electrical companies providing increased protection and response to the higher probability lower criticality events and the security measures to protect and respond to terrorism attacks on our infrastructure. As a key element to our country’s infrastructure, electrical utilities face the threat of high probability events as well as low probability terrorist acts.<< MORE >>

Preparing for a Pandemic

When planning for a pandemic, masks and gloves are the last thing you need. When considering a response to a pandemic, most employers immediately think of personal protective equipment (PPE), which are less effective measures used to protect employees and the public. Work practice, engineering controls, and administrative controls are far more effective but generally take more advanced time and resources to plan and implement. The key to a successful response is to be proactive as well as reactive. Every organization should include a planned response to a pandemic as part of the emergency response plan, business continuity plan, or general policies and procedures.<< MORE >>

How to Choose an Integrator

The choice of a qualified systems integrator is critically important to the success of the installation of a security system. Whether this process is managed by in-house personnel or a qualified outside consultant, the qualifications of system integrators should be carefully evaluated.<< MORE >>

Creating a Master Plan

A master security plan defines the structure and procedure for the security program. The process of developing a Master Security Plan begins with and has its foundation in the information, outcomes and recommendations of the assessment activities. Creating an integrated security plan to guide a security program is rooted in the existing organization, policies and procedures, culture and characteristics of the population.<< MORE >>