| The process begins with our gaining an understanding of the problems, issues, risks and likelihoods affecting your business. |
|
We cannot hope to fully understand all aspects of a Client's business without directly working within that business for many years.
However, while we provide the expertise in the field of security systems our Clients know what their risks, strengths and weaknesses are.
Our job then, is to help our Clients articulate their security related requirements. This is done by appointing "Stake Holders" within the Client business from as many departments as possible. SHs will usually come from Site Security, HR, Operational Management and Finance and all will have their competing views on security.
A risk analysis takes place and is derived from the nature of the Business, the output, the likelihood of attack and the result of a loss.
Cost benefit analysis seeks to justify the cost of the solution against the value of the loss and the likelihood of loss.
Simple tools are used to record the level of existing protection against the Risk Analysis and the CBA is used to evaluate the worth of the spend
Having defined the problem and the solution a specification is produced.
Tools have been developed to avoid the problems that both "off the cuff" and "cut and past" specifications tend to generate.
Cut and past documents are NOT tailored to the specific customer and can, in error, contain references to previous recipients.
Off the cuff documents often suffer from poor construction, ill thought out clauses that are open to interpretation and sometimes omit key elements not thought of at the time of writing.
Specification tools allow for pre written clauses to be categorised by type and product and for the appropriate clauses to be selected in order to aid selection and avoid omission. Clearly, as this system develops, more and more clauses can be added to suite the vast array of differing circumstances being encountered.
Thus, a specification is created as a hybrid document, firmly written for a specific Client as opposed to being copied from previous work for other Clients but nevertheless based on experience form previous work.