Audit Report of a Washing Factory

Audit Report of a Washing Factory

A security audit was carried out at Auto  Washing Ltd on 15 August 2009

Personal Security.

• Physical Security.
• Information Access Control.
• Storage and Distribution.
• Contractor Control.
• Drug Interdiction.

The audit team consisted of the following persons of Corporate Head Office.

The audit started at 1015 hrs and concluded at 1700 hrs. The following are the observations:

Personal Security

• Some lefty workers ID copy not displayed in the main gate.
• Security Awareness among the workers needs to be geared up.
• Background checks of old workers are not up dated frequently.
• 9 New Workers were found not issued with IDs.
• Employment history checks are not conducted correctly.
• Background checks are not completed for some new workers.
• The plant has some isolated security related policies but missing a comprehensive Security Policy contained in a single book.
• Missing ID card cases not investigated properly.

Physical Security

• The tree situated between the perimeter wall and the factory building should be covered with barbed wire.
• Chassis number of incoming cargo Covered Van not recorded in the Vehicle In/Out Register.
• Some lights were found fuse near the perimeter wall.
• There are no distribution records of keys.
• Phone number of nearest Police Station not displayed with other important number in the gate.
• Parking lot is not properly monitored.
• Back ground checks on all applicants are not documented.
• CCTV monitor recording is of 32 days only.
• Auto intrusion detection system not yet installed in the factory.
• Guards on patrol duty are not provided with torch lights at night.
• Training and awareness on Cargo Integrity, recognition and detection of dangerous substances, internal conspiracies etc are to incorporated in the training classes.
• Restriction on employees’ access must be restricted to own relevant areas.
• Some portion of perimeter wall needs more lights to illuminate during hours of darkness.
• Parking Lot for visitors and employees not separated.
• Internal patrolling of guards is not documented in Guards Patrol Register.

Information Access Control

• Computer back up system is not stored properly.
• Incidents of unauthorized IT system access are not investigated.
• Invalid password attempt to access file is not reviewed periodically.
• Information access related security and procedures are not documented and verifiable.
• The facility should implement intrusion warning system into its network system.
• Factory must possess a policy for disciplining IT system violators.

Storage and Distribution

• Cargo units are labeled but not weighed before loading.
• Storage and distribution security procedures need improvements.
• Restriction of movement of uninvolved persons in the loading dock.
• There is no security control system in place to prevent introduction of foreign materials at the point of loading.
• The sentry on duty at the store area needs to be trained further on counter intruder procedure.
• Partially loaded cargo vans are not sealed.
• Contractor Control
• Security related aspects are not incorporated in the agreement.
• Contractors records which are not documented in a separate register.
• While selecting contractor the facility does not consider contractor’s security control.
• Contractors back ground checks are not made.