Health & Safety and Security Risk Assessments
After more than 20 years of conducting risk assessments, it has become clear that when one person is responsible for both health and safety and security, security often suffers. Typically, a security or risk manager dedicates roughly 90% of their time to health and safety because it is legally mandated, while security is not.
As a result, security is frequently deprioritized and overlooked until serious incidents occur. Hijackings, kidnappings, murders, or discovering a deceased individual on a premises often reveal inadequate security measures. Court cases frequently expose these failures, highlighting negligence and, in many cases, gross negligence.
We recently conducted an independent security risk assessment for a corporate company in Cape Town, highlighting how security and health and safety are deeply interconnected. Addressing both ensures a safer workplace, minimizes vulnerabilities, and promotes overall organizational resilience.
If you would like to learn more about our assessments or have specific topics you would like us to cover, please email your suggestions to andre@alwinco.co.za. We will create and publish articles tailored to your interests on our website.
The Health and Safety Act defines a hazard as a source of danger and safety as being free from hazards.
You will agree that crime clearly qualifies as a hazard, meaning inadequate security can constitute negligence. Security risk assessments identify these risks and provide the foundation for addressing them effectively.
There are two types of security risk assessments.
An A-assessment is conducted proactively before any incident occurs. It identifies potential risks, assesses current measures, and provides recommendations to prevent crime before it happens. This proactive approach ensures that weaknesses are addressed before they can be exploited.
In contrast, a B-assessment is conducted after an incident, usually at the instruction of lawyers, families, friends, or the court. Its purpose is to determine the standard of security and identify decisions or failures that contributed to gross negligence.
Click Here to read more on different types of assessments.
Many companies believe they comply with the Occupational Health and Safety Act because they maintain fire drills, first aid kits, and personal protective equipment.
Yet one major gap remains: crime is rarely considered a health and safety risk. (Is crime dangerous?) The Act requires employers to provide a workplace safe from foreseeable dangers, and in South Africa, crime is one of the most pressing threats. Employees working late shifts are vulnerable to armed robberies or hijackings. Staff handling money can become targets for theft or assault. Poorly lit parking lots and unprotected entry points increase the risk of attacks, kidnappings, or break-ins. If an employee is harmed due to inadequate security, it is not only a crime issue; it becomes a health and safety breach.
Security risk assessments should be as integral to a business as fire risk plans.
They identify weak points criminals might exploit, real risks to staff beyond cameras and equipment, and practical steps to reduce exposure while increasing control during incidents.
Although no law explicitly mandates an independent security risk assessment, the Health and Safety Act’s definitions of “hazard” and “safe” make its necessity clear. A hazard is a source of danger, and being safe means being free from hazards. If crime poses a danger, it falls under the Health and Safety Act.
Organizations are responsible for protecting everyone on their premises and surrounding areas. Most companies, approximately 99%, fail to comply because they lack proper security risk assessments and measures. Opinions vary, but courts ultimately determine responsibility when incidents occur.
Addressing these risks is not optional; it is a legal and moral obligation to protect employees, visitors, and the public.
Disclaimer: we use images generated by ChatGPT.