Security Audits

Security measures are of little use if they are not enforced. A security audit assesses how effectively your organization’s security policies are being implemented. Our audits will show you where gaps and vulnerabilities might exist in your current systems and procedures.

With over 45 years of experience, we have seen countless reasons for noncompliance with existing security procedures. Sometimes employees bypass measures for the sake of convenience or if they feel they can be more productive without them. Other times, there is a resistance to change or just forgetfulness or carelessness. Multinational companies and those with multiple facilities can find it especially challenging to ensure system-wide compliance with security procedures.

We have the global resources to uncover where weaknesses and security gaps exist throughout your organization and identify noncompliance issues. We can help you establish a balanced and effective security risk management program that you can be comfortable and confident with. This exercise can be especially beneficial after an acquisition for standardizing policies and procedures.

Our security audits can also be important in internal investigations when anomalies are discovered, or wrongdoing is suspected. You can use our findings for any potential litigation/legal proceedings and to strengthen your internal controls to mitigate future problems.

Case Study – Security Audit of Insurance Provider 

Kroll was engaged by a leading U.S. insurance provider to evaluate the company’s security management and operations at its headquarters and regional locations. The assignment included physical security assessments of the company’s buildings, aviation assets, corporate security functions including emergency management, executive protection and electronic security systems, and its security command center. The client’s primary interest was to assess its security functions against industry standards and to expand and enhance security management and operations to meet future demands, both technically and functionally.

Kroll conducted the following tasks to observe operating conditions, evaluate current strengths and weaknesses, and develop feasible and achievable recommendations based on enhancements and mitigating controls:

• Understand the company’s operating environment at the executive, managerial and support levels

• Observe campus and regional occupancy characteristics and functions to evaluate existing physical security controls

• Review existing electronic security systems, including access control, video surveillance, alarm management and intrusion detection

• Evaluate security and safety at the company’s aviation facility, as well as the aviation support offices, corporate jet, staffing protocols and training for crew and support personnel

• Assist the company in its selection of a director of security, including candidate recruitment and evaluation of candidates’ competencies

• Review the contract security provider’s operating protocols, including retention levels, in service trainings, post orders, deployment and staffing

• Evaluate the selection process and training protocols for the company’s armed rapid response force

• Conducted residential security reviews of all C-level residences to evaluate crime prevention and proposed upgrades
• Reviewed all security-related policies and procedures and compiled recommended improvements
• Evaluated the company’s security command center for core competency, staffing and incident management capability

Kroll’s security audit contained recommendations for the enhancement and expansion of the security function and we presented the findings to the company’s board of directors.