Unit 1 LO3
3.1: Explain why security and confidentiality are important in a business environment?
Primark is a well-known fashion retailer in the UK (Primark, 2017). Security means protecting information and systems from unauthorized access, use, disclosure, disruption, modification, or destruction. The terms information security, computer security, and information assurance are frequently used interchangeably (Study.com, 2017). These fields are interrelated and share the common goals of protecting the confidentiality, integrity, and availability of information.
Security in Primark plays a significant role in meeting its organizational goals. In stores of Primark, the alarm systems are integrated with CCTV, so that for example, if a fire door is opened the alarm activates and the CCTV camera automatically pans around to that area to record the scene. This security system is developed to stop shoplifters. This security system also fits the fire doors with maglocks, keep the doors locked at all times except when there is a genuine fire alarm condition. Safety for customers always remains a priority and the doors will open in an emergency situation. Crime prevention initiatives like these are shared with other retailers. Primark takes a responsible approach towards the DD243 standard and police response to alarms.
It aims to satisfy its own needs through its security arrangements, and hopefully not to waste police time. Panic alarms at the tills and in the PFS are linked to the main alarm system as well as the Communications Centre at SSS. The store manager is notified immediately, via one of the control panels, when this alarm is triggered. Police are also notified of panic alarm activations from the PFS’s and Cash Offices. Warehouses are under threat from burglars.
All goods at risk from theft are protected by the alarm system. “It is a managed risk.” The roof space is a vulnerable area and so immense that it is not the easiest place to alarm. However, additional systems are employed in specific and back up areas. Colleague theft is another area of major concern, usually in the form of cash loss. Primark is constantly reviewing and introducing new initiatives such as covert track cameras to monitor cash handling at the tills, striving to minimize all problem areas.
Primark amasses a great deal of confidential information about their employees, customers, products, research, and financial status. Most of this information is now collected, processed, and stored on electronic computers and transmitted across networks to other computers. The business information of Primark should be confidential. This is because information about a business’s customers or finances or new product line fall into the hands of a competitor, such a breach of security could lead to lost business, lawsuits or even bankruptcy of the business (Network Magazine, 2017).
Protecting confidential information is a business requirement, and in many cases also an ethical and legal requirement. Primark has valuable trade secrets that need legal protection, all businesses have the information they have bought, created, developed, improved, enhanced, and hopefully benefited from. So, in the “information age,” ensuring the confidentiality of your own information is essential (Security Guard Training, 2016). The fact all this information might be protected by copyright is a bonus, legally to ensure trade secret and confidentiality (Security Guard Training, 2016). This is because Primark does not want someone selling it or running away to start another business using intellectual property.
Our Recommended Resources:
3.2: Explain the Possible consequences of failing to maintain security and confidentiality in line with requirements.
Failing to maintain security and confidentiality in line with requirements can affect the business of Primark in different ways. Hackers are coming up with new ways to steal passwords, hack files, and download sensitive data they can sell or use to steal from the customers (Ashe-Edmunds, 2018). Work with an information technology company to create security measures that not only keep outside hackers at bay but also to prevent the employees from snooping where they shouldn’t and former employees from entering the computer network or buildings after they’re terminated.
Dark stairwells, poorly lit storage rooms and remote parking lots are prime areas for criminals to rob or assault the employees, customers, and delivery people, and commit acts of vandalism (Inspired Techs, 2017). If Primark fails to team up with a security consultant, insurance company, and/or an attorney who specializes in premises liability to walk the property and determine where it can increase the safety of the people who do business, it will definitely lose its profits, assets, and property.
Failure of confidentiality also affects seriously the business. If Primark fails to determine what information they do not want from competitors to have and examine whether they have it properly protected, the competitors will get the opportunity to beat Primark and gain competitive advantages in the market. If Primark fails to take steps to safeguard the patents, customer lists, recipes, personnel files, sales reports and other data that gives a competitive edge, it will lose trust and faith of its stakeholders that will untimely reduce its customer retention, loyalty, market base, and market share, even revenue and profits (Wilson, 2015). If Primark fails to take these steps, it will fail to gain competitive advantages; even will fail to survive in the competitive market.
If customers, clients, vendors, and suppliers can prove that Primark did not take reasonable care with their property or data, or to protect them from harm, Primark can suffer legal damages that can shut down their business (Ashe-Edmunds, 2018). Even if a judgment is small or a plaintiff’s suit fails, the resulting bad public relations can receive fewer customers likely to work with. It will ultimately break relationships with external stakeholders because they will think that they under harm. That is why Primark needs to take more effective steps to safeguard the data and personal safety of all of these people and its business to improve the security and reduce the liability.