Editorials Opinion and Analysis
Ten Mistakes Companies Make Around Security
By Alex Boyd
Numerous companies operate in the Nigerian oil sector which employ a mixture of locals and ‘oyibos’. The situation in the delta is worsening as the number of attacks and kidnappings rise and these non-Nigerians are increasingly threatened as they try to go about their business.
The majority of the companies are responsible about the security measures required to mitigate the threats that abound. Unfortunately, no plan is perfect and there are common shortcomings.
These can be boiled down into ten common areas:
1. Intelligence
The majority of companies that operate throughout Nigeria do not pay enough attention to the gathering of information and the analysis of such data in order to turn it into valuable intelligence. It is therefore common for these organisations to be punching in the dark. There is plenty of up-to-date information available from any number of sources, which can be cross-referenced to validate it and then analysed to make decisions. This is a system that can be formalised, not left to a few managers’ personal contacts and spare time.
2. Risk Assessment and Acknowledgement
There are numerous ways of acknowledging risk. What tends to happen to an intensely subjective process is that companies tolerate more and more. Agreement on a baseline of acceptable levels of threat early on can often drift so it is important to review and maintain standards.
3. Management
Security can be regarded as an unfortunate necessity. Whilst an ideal security blanket would provide ample scope for operations inside it, senior management often discount it as another cost line and tend not to buy into it fully unless either the cost-benefit analysis deems it appropriate or an attack has happened and it is driven by hindsight. Security is an art, not a science and so it should be managed with suitable levels of authority.
4. Communication
Research has proved that the majority of staff in Nigeria operate in ignorance of the situation. Knowledge of circumstances, when communicated appropriately, can strengthen the bond of an organisation and thereby prepare it better for adversity. This is not just the number of kidnappings, for example, but what the company will do for the hostages and their families. Updates about situations are important to keep staff informed and therefore avoid poor decisions.
5. Crisis response
The threat of terrorism is low but the impact is high. It is possible to use this extreme scenario for appropriate ‘What if?’ planning. Unfortunately, the plans in place for many firms tend to pay little more than lip service to possible scenarios. Most response scenarios tend to be managed poorly and made up on the spot. It is important to mitigate risks by updating and maintaining such plans.
6. Inflexibility
No plan will prove 100% effective in the face of an incident because it is impossible to predict everything. Therefore flexibility must be built into any plan in terms of procedures, management and response mechanisms. This should be transmitted to all in order that a response is fluid and swift.
7. Travel Planning
Although a lot of movement around Nigeria has been constrained by the heightened threat, there are still areas that could benefit from strengthening. Many companies do not monitor the movements from residential to work compounds. Logging staff movements around sites is often neglected and this can result in time wasting during incidents as there is a need to account for personnel.
8. Training
Research has demonstrated that the majority of staff are unaware of their role in response to an incident. Therefore it is important that their responsibility, from merely evacuating the building in case of a fire to corralling essential documents in case of a move, is transmitted through thorough and detailed training.
9. Rehearsals
Personnel come and go within organisations and situations also change. While the primary concern of that company may be to make money, it is important that this is secured. Rehearsing responses on a timely basis, for instance, every 90 days, will ensure this protection is maintained. This is deemed an expensive practice by some companies but the cost to them of a successful attack and kidnapping can be far greater.
10. Review
Many companies feel that once they have addressed a plan once, it can remain as the overarching policy in perpetuity. Unfortunately, this has been proved to be wholly ineffective and thus regular reviews must be conducted to include feedback from rehearsals as well as intelligence. The threat may change, the tactics of the militants may become more refined and the measures may become untenable. Reviewing and updating increases the protection.
These are not constrained to Nigeria. These are omissions that companies make throughout the world around security. Whilst the situation in Nigeria continues to worsen, it would be prudent to take some time to review plans and be honest as to where there may be gaps.
About the author...
Alex Boyd is a risk management consultant who advises clients throughout the world, through direct consulting, writing and delivering seminars and lecturing. Not only used by the media to provide expert advice on risk, he has also accrued experience working with governments, their agencies and multi-nationals.
He welcomes your comments and can be reached via this site on: mail@oyibosonline.com
