Ostrich attitude
Most companies and government institutions do not have a formal plan to protect their organisation against all sorts of criminal activity. Money, goods, time and - last but not least - information have all had the attention of criminals. Consequently, it is important that management looks for solutions to minimize the risks. It is their responsibility to draw up a security plan. A security plan defines the framework of security and describes the way in which the organisation and employees are connected. Management decides which risks are unacceptable and which investments are necessary to control these risks.
In many companies I found that the management lacked knowledge about risk management and security management. As a consequence these subjects were rarely discussed! This phenomenon is known as ostrich attitude. Often security consists of more than ad hoc measures, mostly on an operational level.
I am convinced that security should be on the agenda of the management of every company. It is the only way to achieve a solid and trustworthy organisation.
The world around us changes at a high pace and new security and safety risks come up every day. I think the management has the responsibility to respond accordingly. If an incident has taken place, it is a very poor excuse to say that the management has never discussed security. Or rather, there is no excuse!
Column by Bonne van de Dijk
In many companies I found that the management lacked knowledge about risk management and security management. As a consequence these subjects were rarely discussed! This phenomenon is known as ostrich attitude. Often security consists of more than ad hoc measures, mostly on an operational level.
I am convinced that security should be on the agenda of the management of every company. It is the only way to achieve a solid and trustworthy organisation.
The world around us changes at a high pace and new security and safety risks come up every day. I think the management has the responsibility to respond accordingly. If an incident has taken place, it is a very poor excuse to say that the management has never discussed security. Or rather, there is no excuse!
Column by Bonne van de Dijk
Meer informatie
