SS-040 Ver 1.0 (May 23)
Security is a "Risk" based service – if there is no risk, there is no need for Security, but there is never ‘no risk’. Any well designed Security operation must seek to provide sufficient "Risk Reduction" through Security management operations, consistent with the probability and impacts of those risks. With any risk management process the expenditure on mitigating risk outweighs the impact of the risk. It must be remembered that Security is achieved by a combination of resources, processes and physical measures. Security is not guarding or monitoring alone. To achieve the optimum level of Risk Reduction all factors must to be accounted for.
Cost effective Security is the right combination of all factors that have an element of inherent "Risk" attached to them.
1. Overview
2. Understanding Risks
Confidential & Proprietary | 2024 CBRE Inc.
4. Useful Links
Physical Security Risk is a circumstance of exposure to danger. An example might be a minimum control of entry and exit activity or not having security systems in place to control the movement of people and visitors.
In the physical Security world, you should never allow for Risk.
Physical
Security
DETECT
(Electronic)
RESPOND
(Personnel)
DELAY
(Physical Measures)
3. Risk Assessment Process Guide
It is imperative before going through any form of transformation phase to:
- Understand the inherent Risks on site
- Adopt a Risk Assessment
- Review the outcomes and discuss with both CBRE internal Security staffing and the Client to obtain clarity and understanding of the results
Identify Assets
Identify and
Assess Threats
Identify and
Assess Vulnerability
Assess Risk
and Value
Identify suitable
Cost Effective
countermeasures
Re-Assess the
Risk
Select and Implement
response
Review Risks
- People
- Property
- Information
Risk Assessment
Process
Security Services
Change and Transformation
Transition
Page 1 of 3
SS-040 Ver 1.0 (May 23)
1. The Business Case for Change
Confidential & Proprietary | 2024 CBRE, Inc.
5. Useful Links
There are circumstances in which a Business case for change is required. It is important to consider the "Risks" and the "Benefits" of making any change to a Security service as changes can lead to potential outcomes that may affect other operations of the business even though the view for change is only Security related. An example of this might be that a reduction in the number of guards on site during the day will require additional Capital expenditure for equipment (Technology- such as Cameras or sensors) to take over. A Client may not be able to execute Capital Expenditure to meet the changes.
2. The circumstances when a
Change is required
Change may affect account operations of Service provider staff
There will be a significant Service Level RISK
Contractual changes
Possible non-compliance by Service provider
Changes in policies or standards
Technical implications (ie IT systems)
Regulatory changes
Insurance
Implications
Landlord changes or requests
Statutory
changes
A Change Business Case must be produced for sign off by both CBRE and the client before making any changes that affect service levels, standards or security policies, have wider operational impacts or change risk profiles or require major capital investment to facilitate the change.
A Change Business Case must be produced for every transferring account and all new business as part of the Account Security Strategy. This will help speed up the process of change approval by reducing challenges, ensuring all factors are considered and ensuring that the correct stakeholders are engaged.
3. Approval
4. Key Principles to follow
Proposed changes MUST not
increase RISK or
Reduce SAFETY
Proposed changes MUST be
SUSTAINABLE
There should be a Return on any investment made
Proposed changes MUST be
Accepted BEFORE
Proceeding
Final changes
MUST be
fully Documented
Security Services
Business Case for Change
Transition
Page 2 of 3
SS-040 Ver 1.0 (May 23)
1. Key Steps in Change Management
Confidential & Proprietary | 2024 CBRE, Inc.
Appoint a
Change Lead
Create a
Project Plan
Identify and
engage Stakeholders
Identify
and document scope of changes
Identify
operational requirements
- need for change
Document the key benefits of the changes planned
Conduct a Risk Assessment and validate if okay to proceed
Conduct a Risk Assessment and validate if okay to proceed
Identify Costs and Cost Benefits - Document
Calculate the ROI - Document and share with team
Obtain sign off - Implement changes
Review
in
3 Mths
START
COMPLETE
2. Useful Links
REFER TO TRANSITION AND MOBILISATION PAGES FOR FURTHER INFORMATION
Security Services
Key Steps in Change
Transition
Click HERE