FAQ

A written text by which the Management of a Company, Business, Organization:

• Declares its will to ensure a safe working environment for employees, customers, visitors in its facilities and in its areas of activity and to protect its assets and reputation by increasing its resilience against any potential threat.

• Designates a specific executive as responsible for the preparation and implementation of the necessary Plans, Instructions and Procedures.

• Sets the framework within which security measures and procedures will be implemented (e.g., respect for individual rights, agreement with existing legislation, etc.)

• Assigns roles and responsibilities to management executives.

• Calls on all employees to observe and implement all the prescribed measures and procedures.

An adequate and comprehensive Security & Resilience Program should include:

• Security Policy

• Risk assessment study

• Vulnerability study of facilities / activities

• Security and Resiliency Structure

• Training Program

• Operational Security Plan for Facilities / activities (which includes the applicable measures and procedures)

• Emergency Response Plan

• Crisis Management Plan

• Business Continuity Plan

• Procedure for selection, supervision and evaluation of cooperating Security Companies

• AUDITS process

• Estimated budget

The measures are proposed and implemented by the Security and Resilience Manager and approved by the management or the Security and Resilience Committee (where applicable). These measures are not static nor permanent either in terms of type or duration but are always updated through the risk assessment and vulnerability study process, so they can be escalated or de-escalated, varied or even stopped. It is very important that employees, customers and visitors are properly and promptly informed of the above changes.

Many times, the choice of a Security Company is influenced by many factors, such as personal friendships or preferences and above all the low prices. However, the final choice must be the result of a process that involves many areas (procurement, financial, legal and above all security and resilience). The same procedure must also foresee the evaluation method. Another point is the signed agreement. In most cases, Security Companies fill out a one-page form with which they mostly protect their own interests.