"#Risk mitigation entails a methodical approach for evaluating, prioritising and implementing appropriate risk-reduction controls. A combination of technical, procedural, operational and functional controls would provide a rigorous mode of reducing risks. Physical access control systems of office entrances, visitor management procedures at the building’s entrance, deployment of guards at branches are examples of such controls." #risk #risks #enterpriserisk #enterprisesecurityriskmanagement #intelligence #threatlintelligence #riskmanagement #riskanalysis #riskassessment #riskmanagementframework #operationalriskmanagement #projectriskmanagement #projectrisk #operationalresilience #resilience #operationalrisk #riskintelligence #governance
"Physical Security Risk Assessment (RA) involves the identification of potential threats and assessment of its impact to the organisation with the objective of identifying and implementing appropriate mitigating physical security measures. There are various instances when a RA or Threat and Vulnerability Risk Assessment (TVRA) should be conducted as needed by regulatory or internal requirements. The MAS Technology Risk Management (TRM) Guidelines states that the TVRA aims to identify the physical security threats and operational weaknesses to determine the level and type of protection required. RAs may differ in complexity due to the different types of infrastructure, criticality and scope. The assessment of threats and vulnerabilities will vary depending on factors such as geographical location, multi-tenancy considerations and type of tenants, asset and operational value to the organisation, impact from natural disasters, and the prevailing political and economic climate. The FI should base its RA on various possible scenarios of threats under the MHA Peacetime Threat list which includes theft, explosives, unauthorised entry, external attacks amongst others. RAs should be conducted in key facilities or critical assets such as Data Centres, Headquarter building/office, flagship branches and critical operational areas." #security #securityriskmanagement #securitymanagement #securityrisks #enterprisesecurity #cybersecurity #physicalsecurity #informationsecurity #digitalsecurity #securityoperations #enterprisesecurityriskmanagement #securityassessment #intelligence #threatlintelligence #risk #riskmanagement
Head of Global Security Operations at Everbridge
1yHolly Gajić BSc CSMP MSyl (née Brierley)