© Copyright Acquisition International 2025 - All Rights Reserved.

Article Image - Organisational security and the hidden risk
Posted 20th January 2021

Organisational security and the hidden risk

The security needs of businesses vary greatly dependent on the sector they are in. Despite the varying requirements, each business’ broader approach to security should follow a similar format where vital assets – those that needs to be protected - are surrounded by several security layers.

Mouse Scroll AnimationScroll to keep reading

Let us help promote your business to a wider following.

Organisational security and the hidden risk
security

By Chris Johnson, Head Business Development Digital Services at MASS

The security needs of businesses vary greatly dependent on the sector they are in. For example, the financial sector is generally more developed than others due to the potential risks associated with a security breach. Despite the varying requirements, each business’ broader approach to security should follow a similar format where vital assets – those that needs to be protected – are surrounded by several security layers.

This approach helps ensure that if the first or even second layer is breached, the asset is not compromised or put at risk. But too often security measures are not thought about holistically, with physical, cyber and personnel risks all considered individually when in fact they are intrinsically linked. Often, there are hidden risks that may not even have been considered.

Here, we’ll explore the rounded approach that MASS takes with both public sector and defence organisations, and how this can be applied to improving security within all facets of the private sector.

 

Physical security

The first and most obvious security consideration should always be physical access to the organisation’s building or site. Even in sectors where physical security is well established such as finance or data centres, it remains vital.

Identifying the perimeter is fundamental, due to the potential of distributed site facilities, linked remote assets and supply chains, the perimeter may not be as clear as initially thought. To achieve this, the use of scenario-based analysis actor personas, motivations and objectives can be invaluable for exposing how a business could be targeted and exploited.

This should include a review of the physical barriers that prevent access to the site and their role as a deterrent and detection method for hostile activity.

But security measures are only as secure as the people applying and adhering to them. Factors including staff making simple mistakes (such as wearing security badges in the street) or poor motivation of roving security staff or those monitoring CCTV can cause warning signs to be missed – and allow for future security breaches to slip through the gap.

 

Cyber security and the aging risk

The risk of cyber exploitation has grown considerably in recent years due to the financial and technical barriers to advanced cyber-attacks being reduced. For this reason, levels of cyber security must be taken to a new level and any existing measures continually scrutinised.

The COVID-19 pandemic has brought this issue to the fore, with homeworking and remote access highlighting the importance of cyber security, and also shining light on the risks posed by aging equipment and systems.

Throughout 2020 the challenges associated with using legacy data systems have been highlighted, and with increased traffic and offsite access the user experience has become slow and often with intermittent access. Legacy systems are also more challenging and expensive to protect.

The efficient transfer of business data from legacy systems onto a modern platform and data warehouse can not only help protect information more effectively from cyber threats but is also often a more effective use of resource when compared to protecting legacy systems.

To help mitigate network cyber risks, penetration testing regimes can be vital but tools like ‘CBEST’ only offer a snapshot in time and therefore have limitations. Frequent, lighter touch assessments enhanced by modern threat intelligence techniques are recommended in line with these tools as they offer a more dynamic view of vulnerabilities.

 

Consider insiders

Those who might misuse legitimate access to an organisation’s assets are known as insiders and are often overlooked. Many security controls are now so effective that exploiting those with legitimate access is one of the only ways to circumvent them. The right insider or team of insiders can overcome almost all security measures, while insider breaches have a disproportionately high business impact.

Insider cases are typically individuals who have had a personal vulnerability exploited or have become disgruntled with an employer, and it is a challenging area to address. That being said, security culture, employee wellbeing and employee sentiment are just some aspects that a business committed to its security should consider.

It’s also prudent to examine the wider supply chain. Many businesses rely on an interconnected network of suppliers which makes it difficult to pinpoint risk, so identifying ‘hot-spot’ areas allows them to filter complex information and establish risk effectively.

 

Changing times

If these layers of security are not considered collectively, some areas can fall through the cracks. The COVID-19 pandemic has had an unforeseen impact on security, with some companies experiencing a change in working practices or accelerated growth. Yet their data is stored on legacy systems which unless addressed, are cyber-attacks just waiting to happen.

At MASS, our security experts consist of professionals with extensive experience in preventing security breaches and managing data from mission critical systems. We ensure our security analysis meets and exceeds industry best practice.

MASS has recently launched its Virtual Learning Environment allowing us to conduct Cyber Security Training remotely for whole organisations, individuals or management teams. For more information, please visit: https://www.mass.co.uk/what-we-do/mass-online-training/online-training-courses/

Categories: Strategy


You Might Also Like
Read Full PostRead - Eye Icon
Most Trusted for High-Value Transactions in the Caribbean
Strategy
29/06/2016Most Trusted for High-Value Transactions in the Caribbean

Emmanuel Jacques Almosnino is well renowned law firm, comprised of highly skilled international attorneys involved with tax, financing, real property and wealth management.

Read Full PostRead - Eye Icon
Financing a Sustainable Future: High-Level Working Group On Green & Sustainability Sukuk Releases Its First Report
Corporate Social Responsibility
26/10/2022Financing a Sustainable Future: High-Level Working Group On Green & Sustainability Sukuk Releases Its First Report

Global green and sustainability sukuk issuance totalled $4.4 billion during the first half of 2022, following a record annual issuance of $6.1 billion in 2021, according to data published by the High-Level Working Group (HLWG) on Green and Sustainability Sukuk

Read Full PostRead - Eye Icon
Charterhouse’s Acquisition of Stake in Comexposium
M&A
14/05/2015Charterhouse’s Acquisition of Stake in Comexposium

Charterhouse's Acquisition of Stake in Comexposium

Read Full PostRead - Eye Icon
Cargill Beefs up Capabilities, Commitment to Protein, with South Carolina Plant Purchase
M&A
04/03/2016Cargill Beefs up Capabilities, Commitment to Protein, with South Carolina Plant Purchase

People in the eastern United States enjoy good beef burgers and beginning this spring Cargill will be able to better meet those needs through the acquisition of the FPL Food, LLC ground beef processing plant in Columbia, S.C. Purchase of the 100,000-square-foo

Read Full PostRead - Eye Icon
The Rise of Sustainable Business Practices: Strategies for Balancing Profit and Purpose
News
06/06/2023The Rise of Sustainable Business Practices: Strategies for Balancing Profit and Purpose

As business owners, executives, and professionals, we must ensure that our businesses succeed while striving to be socially conscious. As a result, sustainability has become a priority for many organizations as they seek to ensure long-term success and priorit

Read Full PostRead - Eye Icon
CEO of the Year, Austria
Leadership
02/02/2016CEO of the Year, Austria

Vienna International Hotelmanagement AG looks back on more than 26 years of success, during which time it has focused on building and expanding its portfolio of hotels in the 3- to 5-star segment.

Read Full PostRead - Eye Icon
Connecting to Success
Innovation
24/10/2019Connecting to Success

In a world that is increasingly focused on incorporating the latest technology and software, it is important to ensure that all industries have the ability to solve problems using high-performance computing systems. X-ISS is a cross-platform management and ana

Read Full PostRead - Eye Icon
5 Ways AI Is Outperforming Experts
Innovation
07/03/20225 Ways AI Is Outperforming Experts

With DeepMind claiming that its AI system – AlphaCode – can “write computer code at a competitive level,” a milestone may have been reached. The ability of a machine to match the coding skills typical of human intelligence, if true, represents a moment

Read Full PostRead - Eye Icon
Looking to the Future: The Forecasted Trends of Business Analytics
News
29/01/2024Looking to the Future: The Forecasted Trends of Business Analytics

It can sometimes be difficult to predict what might come next. For example, consider the weather model a local meteorological service may provide to communities – while it may be possible to determine a forecast for seven days to a high degree of accurac



Our Trusted Brands

Acquisition International is a flagship brand of AI Global Media. AI Global Media is a B2B enterprise and are committed to creating engaging content allowing businesses to market their services to a larger global audience. We have 14 unique brands, each of which serves a specific industry or region. Each brand covers the latest news in its sector and publishes a digital magazine and newsletter which is read by a global audience.

Arrow