Assessment of Security
An assessment o security was carried out on 16 April 2009 to review the security of Auto apparels ltd. the security inspection and audit was based on the board spectrums-Pat requirements which include all aspects of Physical Security, Personal Security, Information Access Control, Storage Formalities, Contractor Control, And Export logistics.
Aim:- The aim of this audit was to find out weaknesses prevailing in the security aspects of the factory and thereby adopt remedial measures so to correct the existing gaps, overcome the prevailing difficulties and thereby ensure a fool proof security arrangement in the factory.
Concept: The assessment covered the following facets:
- Personal Security.
- Physical Security.
- Information Access Control.
- Record and Documents.
- Storage Security.
- Shipment Information controls.
- Contractor Control.
Personal Security:
- New workers orientation has to be more effective especially on Product Integrity, IT Security, and Factory Security Sensitive Area etc.
- Update back ground checks of some employees were missed out.
- Some reinvestigation of for some workers in the Finishing Section is missed out.
- Copy of National ID is not obtained from many workers till now.
- Threat Awareness Program is to be presented in a more effective manner so that all workers are aware of it. Just attending a lecture on the same won’t be understood or retained by the workers.
- All workers must be made aware of the system the company is following to address any given situation or crisis and also how to report it, like if they find out a lock is broken or window is broken etc, then how whom to report.
Physical Security:
- CCTV is not having uninterrupted recording, due to power problem.
- Some signature were found missing in the KEY Control Register.
- Up to date names of Key persons who has privilege access to security sensitive zones, not posted outside the Finishing Section.
- Handing / Taking certificate over of keys not maintained when any key holder gets changed.
- Some signature were found missing in Patrol duty register.
- An up to date list of names and address of all contractors, repairman etc was found missing.
- Awareness of workers to prevent tampering of goods during production has to be geared up.
Information Access Control:
- Security longs for failed password attempt registers is empty without any entries. If no attempts were made then ‘Nil’ has to be recorded.
- Unannounced surprise checks on the whole system has to be increased.
- Password Changed Register must contain an inspection sheet.
Storages and Distribution:
- Store personals must be given adequate knowledge on the verification procedure non manifested cargo from being loaded.
- The concerned persons must be given proper training on departing cargo verification against purchase and delivery order.
- Some signatures found missing in the seal control register.
- Periodic unannounced related to storage and distributions are being performed properly.
Employee/ Visitor Packing:
- Parking lot must keep under observation.
- Identification logs must be used for all types of vehicles parked.
- Undercarriage of all vehicles must be checked by button viewers.
Loading/Unloading Shipment:
- The second sweater accompanying the Cargo Container up to port has put his signature in the concerned register.
- MAERSK logistics be asked to enter seal number in the Bill of Lading.
- The second sweater accompanying the cargo up to port should report long traffic jams.
Contractor Control:
- All contract workers must attend orientation training like own workers.
- Contract must be summoned time to time for brief and up date of security.
- All contractors must undergo proper background checks.