Modern methods of countering and reducing security risks

Programme

Day 1

The system of analysing and managing economic risks in the company

• Types of economic risks. External and internal risks
• Creating a system for analysing and managing economic risks
• Methods of assessing and measuring risks
• Analysing threats and assessing their level
• Risk monitoring. Risk management radars and matrices
• Forecasting the risk situation. Identifying the sources of information that make it possible to identify the causes of risk and its possible types. Establishing the sources of risk
• Forecasting the main types of risk
• Applied methods of managing economic risks. Minimisation methods and loss compensation methods. Pre-emption methods and risk avoidance methods. Localisation methods and risk distribution methods

Information protection as an integral part of the organisation's overall security system

• The concept of information security. The most common threats. Basic definitions and criteria for classifying threats
• Main directions of information protection
• The concept of an information security management system. Shortcomings of the project approach to building an information security management system. The process approach to ensuring information security
• The information security policy as the basis of the IS management system. Goals and objectives of the Information Security Policy. General structure of the Information Security Policy
• Auditing the state of information security at the enterprise. Procedure for conducting an information security audit in the Company

The trade secret regime. Confidential records management

• Trade secrets. The concept of «trade secret» in entrepreneurial activity. Regulatory legal acts of the Republic of Kazakhstan defining the concept of trade secret
• Procedure for establishing a trade secret regime in the Company
• Drawing up and applying the list of information constituting the Company's trade secret, recommended information that should constitute the company's trade secret
• Procedure for restricting access to information constituting the Company's trade secret
• Internal regulatory documents governing the Company's activities in protecting trade secrets. Amendments and additions to the company's regulatory documents when introducing the trade secret regime
• The employee's obligation to keep the Company's trade secrets
• Observing the trade secret regime in contract work
• Procedure for transferring information constituting the Company's trade secret to state bodies
• Types of legal liability for disclosing trade secrets and for unlawfully obtaining information
• Confidential records management — an integral part of the Company's security system. Confidential records management as an element of the trade secret protection regime
• Principles of building confidential records management
• Procedure for interaction between open and confidential records management
• Stages of creating confidential records management, practical recommendations on the procedure for creating it

The Company's information security

• The electronic digital signature as the basic mechanism for ensuring the legal validity of a document in electronic document management and the most effective means of confirming the authorship and authenticity of an electronic document
• The information security unit. What should the structure of an effective information security unit be? The place of the IS unit in the organisation's structure. Division of functions between the IS unit and the IT unit
• Organising interaction with the management of the information security unit and the heads of the Company's IT structural units

The Company's personnel security

• Internal threats to the organisation from the «human factor»
• Personnel security threats from competitors and criminal groups
• Psychological characteristics of employees who pose a danger to the organisation. Scheme for vetting job candidates (applicants)
• Preventive measures taken by the company's Security Service to prevent unlawful actions by Company employees
• Various options for creating incentives and motivational factors aimed at strengthening the loyalty of Company employees
• Building relations between the Security Service and Company staff. What is more effective — compromising material or mutual assistance?
• Creating a system of personal responsibility of Company employees
• «Screening signs of danger», what to pay attention to in vetting measures
• The employee dossier. Rules for working with dossiers

Day 2

Corporate fraud

• What is corporate fraud? General characteristics and types of crimes against property. Concept and features of fraud. How fraud differs from other types of crimes against property. Criminal liability for fraud
• Elements of fraud. Fraudsters and their motivation, psychological techniques used by fraudsters
• Structure of a fraudulent operation, forms and scenarios of fraud in various types of business
• How does corporate fraud affect Companies?
• How to distinguish inefficiency from fraud?
• The corporate fraud risk management cycle: overview
• Fraud risk management strategies
• Prevention: main measures (the system of internal controls, vetting counterparties and potential employees)
• Detection: main methods (hotline, tracking behavioural indicators, analytical methods)
• Investigation: what to pay attention to (the legal side of the matter)
• Response: what to do with the results
• What skills are needed to counter fraud effectively
• Creating a system at the enterprise for preventing and protecting against fraudulent operations

Countering kickbacks and commercial bribery

• Assessing the cost of damage (losses) to the enterprise where «kickbacks» or «commercial bribery» are present
• Method for conducting an anti-kickback audit at the enterprise. Identifying business processes and positions with kickback risks. Analysing the work of the procurement unit
• Collecting and analysing information on employees with «kickback» risks. Using technical means (video, audio, DLP systems) to prove an interest in a deal and unofficial arrangements with a counterparty. Collecting compromising material on employees using Internet information resources. Ways of legalising «operational» information
• Detecting an employee's personal interest when analysing contract work at the enterprise. Indirect signs of kickbacks when analysing relations with counterparties
• The mystery shopper method in assessing employees' interest and the objectivity of pricing policy when selecting a counterparty
• Creating a «feedback» system at the enterprise. Hotlines, exit interviews with departing employees, contacts with unsuccessful suppliers and other ways of obtaining feedback
• Legal formalisation of the anti-kickback and anti-fraud policy at the enterprise. Including anti-corruption clauses in employment and civil law contracts. Declaring a «good-faith organisation» policy
• Creating a local regulatory framework for countering and preventing kickbacks and commercial bribery

Managing the guard force at the enterprise. The video surveillance system

• Effective organisation and management of the guard and video surveillance service to prevent unauthorised intrusion into guarded facilities, and prevent theft and other incidents at the enterprise
• Coordinating the actions of guard and video surveillance staff in accidents and emergencies
• Coordinating the security service's actions with facility managers, the emergency management group and the Fire and Emergency Service

Physical protection of the enterprise's facilities

• Methods and technologies for controlling access of authorised staff, visitors and vehicles to guarded facilities
• Protecting the company's inventory from theft and vandalism
• Modern methods of ensuring the physical protection of enterprise facilities vulnerable to terrorism
• Elements of physical security as part of the overall security system: detecting vulnerabilities, reducing risks and developing measures to counter potential threats

Modern methods of conducting internal checks and investigations at the enterprise into inventory theft, fraud and vandalism

• Stages of preparing reports on the results of internal checks and incident investigations
• Compensation for damage caused to the enterprise as a result of unlawful actions
• Interaction of the Internal Investigations Group with the enterprise's departments and law enforcement bodies to prevent incidents and ensure the safety of staff and property
• Procedure for conducting internal investigations and internal checks into unlawful actions by Company employees
• Using the polygraph (lie detector) in internal investigations. The legal and organisational side of the matter. Is it possible to beat the polygraph?
• Procedural documentation of the results of internal investigations
• Interaction of the Security Service with law enforcement bodies in investigating unlawful actions