© Copyright Acquisition International 2025 - All Rights Reserved.

Article Image - Organisational security and the hidden risk
Posted 20th January 2021

Organisational security and the hidden risk

The security needs of businesses vary greatly dependent on the sector they are in. Despite the varying requirements, each business’ broader approach to security should follow a similar format where vital assets – those that needs to be protected - are surrounded by several security layers.

Mouse Scroll AnimationScroll to keep reading

Let us help promote your business to a wider following.

Organisational security and the hidden risk
security

By Chris Johnson, Head Business Development Digital Services at MASS

The security needs of businesses vary greatly dependent on the sector they are in. For example, the financial sector is generally more developed than others due to the potential risks associated with a security breach. Despite the varying requirements, each business’ broader approach to security should follow a similar format where vital assets – those that needs to be protected – are surrounded by several security layers.

This approach helps ensure that if the first or even second layer is breached, the asset is not compromised or put at risk. But too often security measures are not thought about holistically, with physical, cyber and personnel risks all considered individually when in fact they are intrinsically linked. Often, there are hidden risks that may not even have been considered.

Here, we’ll explore the rounded approach that MASS takes with both public sector and defence organisations, and how this can be applied to improving security within all facets of the private sector.

 

Physical security

The first and most obvious security consideration should always be physical access to the organisation’s building or site. Even in sectors where physical security is well established such as finance or data centres, it remains vital.

Identifying the perimeter is fundamental, due to the potential of distributed site facilities, linked remote assets and supply chains, the perimeter may not be as clear as initially thought. To achieve this, the use of scenario-based analysis actor personas, motivations and objectives can be invaluable for exposing how a business could be targeted and exploited.

This should include a review of the physical barriers that prevent access to the site and their role as a deterrent and detection method for hostile activity.

But security measures are only as secure as the people applying and adhering to them. Factors including staff making simple mistakes (such as wearing security badges in the street) or poor motivation of roving security staff or those monitoring CCTV can cause warning signs to be missed – and allow for future security breaches to slip through the gap.

 

Cyber security and the aging risk

The risk of cyber exploitation has grown considerably in recent years due to the financial and technical barriers to advanced cyber-attacks being reduced. For this reason, levels of cyber security must be taken to a new level and any existing measures continually scrutinised.

The COVID-19 pandemic has brought this issue to the fore, with homeworking and remote access highlighting the importance of cyber security, and also shining light on the risks posed by aging equipment and systems.

Throughout 2020 the challenges associated with using legacy data systems have been highlighted, and with increased traffic and offsite access the user experience has become slow and often with intermittent access. Legacy systems are also more challenging and expensive to protect.

The efficient transfer of business data from legacy systems onto a modern platform and data warehouse can not only help protect information more effectively from cyber threats but is also often a more effective use of resource when compared to protecting legacy systems.

To help mitigate network cyber risks, penetration testing regimes can be vital but tools like ‘CBEST’ only offer a snapshot in time and therefore have limitations. Frequent, lighter touch assessments enhanced by modern threat intelligence techniques are recommended in line with these tools as they offer a more dynamic view of vulnerabilities.

 

Consider insiders

Those who might misuse legitimate access to an organisation’s assets are known as insiders and are often overlooked. Many security controls are now so effective that exploiting those with legitimate access is one of the only ways to circumvent them. The right insider or team of insiders can overcome almost all security measures, while insider breaches have a disproportionately high business impact.

Insider cases are typically individuals who have had a personal vulnerability exploited or have become disgruntled with an employer, and it is a challenging area to address. That being said, security culture, employee wellbeing and employee sentiment are just some aspects that a business committed to its security should consider.

It’s also prudent to examine the wider supply chain. Many businesses rely on an interconnected network of suppliers which makes it difficult to pinpoint risk, so identifying ‘hot-spot’ areas allows them to filter complex information and establish risk effectively.

 

Changing times

If these layers of security are not considered collectively, some areas can fall through the cracks. The COVID-19 pandemic has had an unforeseen impact on security, with some companies experiencing a change in working practices or accelerated growth. Yet their data is stored on legacy systems which unless addressed, are cyber-attacks just waiting to happen.

At MASS, our security experts consist of professionals with extensive experience in preventing security breaches and managing data from mission critical systems. We ensure our security analysis meets and exceeds industry best practice.

MASS has recently launched its Virtual Learning Environment allowing us to conduct Cyber Security Training remotely for whole organisations, individuals or management teams. For more information, please visit: https://www.mass.co.uk/what-we-do/mass-online-training/online-training-courses/

Categories: Strategy


You Might Also Like
Read Full PostRead - Eye Icon
Suing a Hospital for Malpractice: A Guide
News
29/08/2023Suing a Hospital for Malpractice: A Guide

A core principle of any kind of medical practice is to safeguard patient well-being. Sadly, it’s not rare to find instances of medical malpractice and negligence. When medical care falls short of accepted standards in any way, the patient has the right t

Read Full PostRead - Eye Icon
3.5 Million Jobs at Risk if EU Grants Market Economy Status to China
Leadership
21/09/20153.5 Million Jobs at Risk if EU Grants Market Economy Status to China

A landmark study by the Economic Policy Institute released today reveals that if the EU grants Market Economy Status to China, the EU could lose 3.5 million jobs and 2% of GDP.

Read Full PostRead - Eye Icon
The Hidden Dangers of Blindly Embracing In Your Business
Innovation
27/04/2023The Hidden Dangers of Blindly Embracing In Your Business

It’s no secret that AI is a trending topic hot on many organisations’ agendas and strategies. However, with the release of ChatGPT, and Machine Learning continuously evolving, cybersecurity service providers, ramsac, are advising businesses not to blindly

Read Full PostRead - Eye Icon
Best Caribbean Restaurant – USA
Finance
01/07/2016Best Caribbean Restaurant – USA

Jamaican Grill is a chain of restaurants specialising in offering flavourful, Jamaican cuisine and excellence client service. Here at Jamaican Grill Restaurants is a totally unique BBQ concept that fuses the flavours of Jamaica, Guam and the Philippines.

Read Full PostRead - Eye Icon
How does Mortgage Life Insurance Work? A Brief Insight
Finance
15/06/2022How does Mortgage Life Insurance Work? A Brief Insight

Mortgage life insurance is a plan that pays off your debt if you die before the mortgage is paid off. It is often known as mortgage protection insurance as well. This insurance policy is usually great for your family as it secures the home and your family does

Read Full PostRead - Eye Icon
Over 35 Years of Sensational Success
Legal
17/01/2023Over 35 Years of Sensational Success

Complex litigation law can be extremely challenging to navigate however, with a strong, level-headed load of experience, we find ourselves in good hands with Marc J. Bern & Partners LLP.

Read Full PostRead - Eye Icon
The Power of Giving Back: Why Corporate Social Responsibility Matters
Corporate Social Responsibility
22/04/2022The Power of Giving Back: Why Corporate Social Responsibility Matters

As we enter 2022, consumers and employees are looking for transparency and authenticity from companies, with 59% of consumers stating that businesses have a responsibility to social good.

Read Full PostRead - Eye Icon
Structuring a Fair Salary Scale
Finance
07/04/2020Structuring a Fair Salary Scale

Once you have decided that you need to hire a new member of staff, you need to think not only about what their role will include, but also what you will pay them. Paying a fair salary is a vital aspect of procuring the right new recruit – get it wrong and yo

Read Full PostRead - Eye Icon
Transforming the Pharmaceutical Landscape
Innovation
03/04/2018Transforming the Pharmaceutical Landscape

Sintetica S.A. is a pharmaceutical company delivering injectable anaesthetics and analgesics to patients worldwide through innovative science and excellence in development, production and marketing.



Our Trusted Brands

Acquisition International is a flagship brand of AI Global Media. AI Global Media is a B2B enterprise and are committed to creating engaging content allowing businesses to market their services to a larger global audience. We have 14 unique brands, each of which serves a specific industry or region. Each brand covers the latest news in its sector and publishes a digital magazine and newsletter which is read by a global audience.

Arrow