Security Review

Security Education Systems provides one of the most unique consulting services that's available anywhere -- and one that's appropriate for any type of company.

We've conducted "informal" security reviews for many different types of companies for years, as a component of our other training and consulting services. Based upon the conditions that we consistently identify -- conditions that may result in a loss or a legal action tomorrow, or thirty years from now -- many of our clients suggested that we develop a consulting service that simply targets a company's "loss potential". We created the Security Review as a standardized, practical and cost-effective means for analyzing the condition and contributions of the security function -- and for identifying the company-wide "windows of opportunity" for loss from all sources. The program may be expanded by the client to include as-needed post-project teleconferences, meeting facilitation and issue-specific guidance.

Vacation Plans?

Security Education Systems recommends an "enforced leave" policy to ensure that every employee is absent from the work location for five (5) full business days -- preceded and followed by a weekend. This includes relieving the employee of his/her keys and other access devices -- and locking him/her out of the computer system. This "enforced leave" practice should apply every employee -- including the Security Officer -- and it should also include an audit of selected employees' work.

You can team this practice with our popular Security Review. We'll review your organization from "the carpet up" for "windows of opportunity" to loss from any source -- and redesign the Security Department while we're on-site. Please visit the Security Review segment for more information.

The Process

The Security Review isn't an audit that identifies compliance issues and makes suggestions for their correction. It's not an examination of a company's financial safety and soundness. It's not an organizational development exercise. It's not an "efficiency" study designed to enhance productivity and reduce operating costs. Although the Security Review often crosses into these processes, it's designed as a comprehensive review of your company's business practices from security and loss avoidance perspectives -- focusing first upon those areas responsible for containing the greatest opportunities for loss. We draw upon our:

l        Knowledge, experience and credibility gained working with thousands of financial institutions of all types and sizes;

l        Examination and investigation processes acquired working with hundreds of state and federal law enforcement and regulatory agencies; and

l        Strategic planning skills and legal "sense" developed working for law enforcement agencies and law firms who defend -- and sue -- companies every day, regarding liability issues.

The Security Review process helps you reduce your company's exposure to losses from mistakes, misunderstandings, crimes and legal actions. Remember that your policies, procedures, business practices and training materials are open to a court's inspection in every criminal and civil proceeding. The review process uses several tools to analyze the "state of security" within your company, including (some financial institution-specific requirements are listed):

1. Reviewing company documents, including:

l        Security Officer's Reports to the Board of Directors for the past three (3) years;

l        Operational Loss Summary Reports , or a summary of the Bank's recent losses due to policy violations and crimes;

l        Organizational charts;

l        Appropriate comments made by examiners and external auditors during the Bank's last review;

l        Written Security Program;

l        Bank Secrecy Act audit;

l        Employee Handbook;

l        Personnel Manual;

l        Existing operations manuals;

l        Existing position descriptions for all personnel, including service vendors;

l        Existing training materials, including course outlines, lesson plans and audiovisual aids;

l        Telephone directory and any existing emergency instructions distributed to staff;

l        Videotapes and diagrams of interior and exterior views of your facilities;

l        Actual Bank documents, including cashier's and expense checks, safety deposit lease agreement, signature cards, and employment and lending application forms and checking/savings account agreements;

l        Various written position descriptions; and

l        Assorted written procedures.

2. Using function-specific questions, conducting interviews with persons responsible for or working within the functions identified in this report, including:

l        Audit;

l        Compliance;

l        Deposit Services;

l        Human Resources;

l        Information Systems;

l        New Accounts;

l        Retail Banking;

l        Security; and

l        Teller Supervision.

3. Conducting on-site inspections of the facilities identified in this report, including:

l        Administration;

l        Back room;

l        Cash-handling;

l        Data Processing; and

l        Warehouse.

The Focus

Using personal observation and interviews, the focus of this project is to develop and articulate a professional opinion of the security environment within the Bank, including:

l        A review of selected facilities;

l        A review of current employee abilities;

l        A review of current training methods and approaches;

l        An analysis of current fraud and violent crime prevention and response procedures, and their understanding and implementation by staff;

l        An analysis of current loss prevention and response procedures, and their understanding and implementation by staff;

l        An evaluation of the Bank-wide loss potential due to mistakes, misunderstandings and crime;

l        An evaluation of the Bank's current ability to defend itself against a liability claim involving premises safety or process design; and

l        Bank safety and security practices that could be eliminated or improved.

The Priorities

The Security Review process includes:

l        Establishing priorities based upon:

¡       Safety issues;

¡       Security issues;

¡       Business practices; and

¡       Policies.

l        Concentrating upon those operational issues of the Bank that traditionally offer the most significant sources of long- and short-term exposure.

l        Conducting an exit recap meeting with department/branch/function representatives of your choosing.

l        Conducting additional telephone interviews with selected personnel as it's necessary.

l        Writing a comprehensive report concerning issues identified -- that includes appropriate recommendations.

Areas Of Exposure

Using these tools, Security Education Systems will compare industry-standard business practices with the ones used by your company, as they relate to the five (5) most common areas of exposure, including:

l        Employees and other institution-affiliated parties -- and their families;

l        Customers and other persons who are lawfully on the premises, including vendors;

l        Facilities that you own, manage, rent, maintain or control;

l        Assets that are tangible and intangible -- particularly the institution's image; and

l        Records from internal and external sources in all forms.

The Report

The final Security Review report relates security concerns with related operational and administrative issues that are addressed within these categories -- and that are presented in this order:

l        Introduction & Executive Summary;

l        Common Threads;

l        Security Function;

l        Employees & Institution-Affiliated Parties;

l        Customers & Vendors;

l        Facilities;

l        Assets;

l        Records; and

l        Summary & Miscellaneous Comments.

Investigations

In addition to helping your company prevent losses, Security Education Systems can help your Security Officer and your Auditor investigate events more effectively by suggesting methods for:

l        Developing a company-wide process for investigating and reporting events;

l        Designing corporate investigative guidelines and documentation;

l        Preparing investigative strategy regarding interviews, evidence and testimony;

l        Interacting with law enforcement agencies at all levels;

l        Interacting with your legal counsel and preparing cases for court; and

l        Recovering lost funds and property.

Need More Information?

Learn more about this unique -- and cost-effective -- Security Review service. Then call Security Education Systems for more information about how this valuable service may benefit your organization.

Last updated on May 29, 2009