Business Intelligence

Business Intelligence

 

 

Introduction

Before delving into business intelligence, let us examining briefly the basic roles of security in business.

Security Primary Function in an Enterprise

Security Primary functions in a business enterprise are: assets protection, crime prevention and loss prevention. While protection guarantees effective interface between assets and the environment to generate wealth, ensure growth and development, loss prevention safeguards organizational assets. In other words security is a prerequisite for business profitability and is calculated using the following formula: P+LP = BP. Where: P       = Protection; LP     = Loss Prevention; and BP = Business Profit.

 

Protection is one major function of security. There will be no such thing as security if protection is not mentioned. We have known from the beginning that our responsibilities are how to reduce or eliminate the opportunities for crime or loss that affects business assets (both tangible and intangible).

 

And so we must have a good grasp of the business and culture of the organization, that is organizational behaviour as well as the environmental circumstances or prevalence that will necessitate business profit. It is absolutely important for security professionals, consultants or managers to realize that skills and competencies are essential to active protection and those measurable effective responses to the modern threat environment are far more critical than ever before.

Although, the diversity of today’s risk comes in a complex matrix of interrelated threats, vulnerabilities, and impacts, safeguards for which must therefore be interdependent. The ability to influence business strategy and address matters of internal risk exposure requires a security chief at the appropriate level in the organization. This should be achieved through the restructuring and focusing of current efforts through this single senior management function. The interaction with senior executives and board members means that the security challenges concerning the proposals and recommendations can be presented. The protective functions of security consist mainly of strategy development, information gathering and risk assessment; organizational preparedness; securing people, core business, information, and reputation; incident responses, management, and recovering; and investors relations, public affairs, and government relations coordination among others.

a.         Strategy Development

A key responsibility of the security manger is to develop and implement a strategy that demonstrates the process in understanding the nature and probability of catastrophic and significant security risk events. This involves:

 

Ø  Outlining in detail the plans to prevent and prepare for an adverse event, including state-of-the-art awareness, training, exercises, and methodologies to include contemporary security programmes and process throughout the organization.

Ø  Continuity of business operations from a security-related attack or catastrophic event.

Ø  Communicating this strategy, costs and related impacts to the highest levels of the organization and the Board of Directors and its operating interface department like safety, community relations, field operations, etc.

 

b.         Information Gathering and Risk Assessment

This is an essential protective role of security in an organization. It is the department for gathering and assessing information related to the development of a wide range of security-related events, assessing information and its various operations that can adversely affect the security and safety of personnel and the profitability or reputation of the organization.

 

 

This involves:

Ø  Logically determining the probability of these security-related incidents and development of appropriate preventive strategies consistent with sound business judgment and internal controls.

Ø  The information to develop these assessment and preventive strategies may come from multiple sources, including organization records, government and law enforcement agencies, news organization, existing security bodies of knowledge, and elsewhere within the environment.

Ø  The capability to make the links between often-disparate pieces of information from multiple sources to understand and assess their importance to the security of the enterprise.

Ø  The ability to understand and be familiar with the people; skills and technological aids that will assist in this process and the development of appropriate prevention strategies across the organization.

 

c.         Organizational Preparedness

The security manager is responsible and accountable for ensuring that the enterprise is prepared for a possibility of attack, catastrophic event, or related significant security incident (major fraud, product tampering, youth restiveness, kidnapping, industrial unrest, civil unrest, bomb attack, etc.)

 

This also involves:

Ø  Ability to successfully operate independently in fast paced, matrix-management environments, requiring driving programmes and projects to completion.

Ø  Identifying the nature of security risks in the business environment and the application of appropriate administrative, organizational, procedural and technical controls to mitigate those pure risks.

Ø  Understanding how and when to enlist the support of risk management, internal audit, finance controllers, outside resources, legal, human resources, and other staff functions also engaged in mitigating various risks to the business

 

d.         Securing People, Core Business, Information, and Reputation

Protection of the company’s integrity, image, people, processes, and assets from harm and loss is also a key responsibility of security management.

 

This involves:

Ø  Classification and protecting the financial and physical assets of the enterprise (cash, facilities, equipment, people and reputation),

Ø  Providing countermeasures to counter the potential risks involved in the loss of intangibles (reputation), intellectual property, and trade secrets.

 

e.         Incident Response, Management, and Recovery

In case of incident of attack or catastrophe, the security department will be responsible for coordinating efforts within the organization to restore critical system and provide facilities needed by the organization to function. There are three types of operations: Normal, Emergency and Post-Emergency.

 

These involve:

Ø  Coordinating with internal and external resources to ensure adequate medical, financial, and emotional support assistance is provided to employees, customers, and others involved in a catastrophic event or an attack on the organization.

Ø  Liaison with local, state, federal, and international government agencies as required.

 

f.          Investor Relations, Public Affairs, and Government Relation Coordination

The security management must closely coordinate with those responsible for investor relations, public affairs, finance, human resources, operations, and government relations. The security manger may be required to participate in the development of media interviews and testify before government regulatory agencies. Having come to terms with the importance of security and the expectations placed on the security manager in the organization, it is imperative we return to the topic at hand – Business Intelligence.

 

 

What is Business Intelligence?

Business intelligence can be defined as a processed information or act, which may serve as the base for further business actions. Mere raw information gathered cannot be called business intelligence, until it is well processed or analyses and presented in a form that serves as basis for business action or inaction.

 

Espionage in Politics and International Affairs

Intelligence and espionage are terms most common associated with national foreign policies; yet secret information is needed to make decisions in politics, commerce, and industry. Political parties have always been interested in the strategic plans of their opponents or in any information that might discredit them – Watergate was one that failed.

 

Most large corporate enterprise today has division for strategic planning that requires intelligence reports. Competitive enterprises are undeniably interested in the plans of their competitors; despite laws against such practices, industrial espionage is difficult to detect and control and is know to be an active tool for gaining such foreknowledge. Many of the tools of government intelligence work are used, including electronic surveillance and aerial photographic reconnaissance, and attempts are even made to recruit defectors.

 

Implications of Modern Technology

All forms and techniques of intelligence are now aided by an accelerating technology of communications and a variety of computing and measuring devices. Miniaturized cameras and microfilm have made it easier for people engaged in all forms of espionage to photograph secret documents and conceal the films. Artificial satellites also have espionage function – that of aerial photography for such purpose as detecting secret military installations. Information held or programmes running on computers are vulnerable to penetration by hackers, whether acting independently or for other bodies. The vanguard of these developments is highly set, but it is known that telephones can be taped without wires, room can be bugged (planted with electronic listening and recording devices) without entry, and photograph can be made in the dark. Of course, this same technology is used in countermeasures, and the competition escalates between those seeking information and those to protect it.

 

In foreign embassies in sensitive areas, confidential discussions routinely take place in plastic bubbles encasing secure room, to protect the confidentiality of information. Intelligence agencies have long been known to be staffed with expert lip readers. Privacy of communications remains under constant assault by technological developments that offer threat to, but promises for, human progress.

 

Principles of Intelligence

It is essential to collect good information regarding the market in which an organization operates, its competition, economic factors affecting operations, business trends, international affairs, political risks, and any other aspect of the environment affecting current or future activities of the organization.

 

Consequently the collection of intelligence information is a universal aspect of business operations. The key questions are not: Do you need to collect intelligence? If so, what kind does your organization need? Rather, how much is enough? What are the best methods to obtain it in a cost effective manner?

 

The key to any intelligence programme is the mission statement and cost list. The mission statement or strategic plan for information collection should be developed based upon the current and projected information requirement of the organization. Major business issues should drive this process. Based upon these issues, a priority list of information categories, functional activities, and specific collection assignments can be developed and managed.

 

The collection of information is then determined by the sensitivity of the information required. As in government intelligence collection, 90% to 95% of all information required by an organization is located in open sources. That is sources of information that can be identified and collected using normal research methods and analytical techniques. The remaining 5% to 10% is the sensitive information and can include due diligence questions, competitor strategies, political-risk issues, and answers to specific questions related to sensitive corporate activities.

 

Information of all types is collected in many departments of the organization to satisfy their requirement for timely intelligence. Departments, such as corporate planning, marketing, finance, legal, special projects, research and developments, strategic planning, and mergers and acquisitions may all be collecting both open and sensitive information on a continuing basis. Several methods are used to make sure that this information gets to the correct user on a timely basis and that collected data are properly analyzes, coordinated and presented.

 

Source of Intelligence Information

Open and sensitive sources are used on a regular basis. These sources include the following:-

a.         Magazine Subscriptions

b.         Internet

c.         Databases and Bulletin Boards

d.         Seminars

e.         Competitor Annual Reports

f.          Consultant Reports and Surveys

g.         Special Studies

h.         Consultant Projects

i.          Competitor Products

j.          Government Fillings

k.         Patent Fillings

l.          Legal Fillings

m.        Court Documents

n.         Freedom of Information Act Requests, etc.

 

Key elements or development of a comprehensive intelligence-collection programme tailored to organization priorities is essential to keep a business viable. These key elements include the following:-

1.         Getting priorities right;

2.         Establishing sources to provide continuing ability to scan the environment for important issues;

3.         Answering specific questions; and

4.         Assisting on specific projects.

 

Business and organization can go to many sources for assistance in the legal and ethical collection of necessary information. This discussion will provide the basic tools to get started and the sources to contract for comprehensive assistance.

The four types of business intelligence most often required are:-

(a)        Market Intelligence or Market Research,

(b)        Competitor Intelligence

(c)        Due Diligence, and

(d)       Political Risk.

Each organization has different information requirements and uses different means for collection and dissemination within the organization. Collection is carried out through both an internal organization and though the use of consultants. In small organizations, the functional departments responsible for the project requiring information will normally do the collection.

 

They might employ consultants to assist in these activities if workload, difficult of access or timing requires it. Large organizations often have a competitor intelligence function, whether called by that name or not, in the security department, or on a research staff. The objective of the intelligence collection function is to ensure that timely, reliable, and useable information is provided to the organization to assist in decision-making.

 

How the information is collected, verified, and presented is the responsibility of the purchaser of the information or data collection department.

 

Market Intelligence

Market intelligence or market research as is popularly known is a focused look at the market place. Depending on the aspect under consideration, it seeks to understand the market place for an organization. It is concerned with the demographics, market definition, end users of the products, pricing, promotion, and distribution channels, product design, impact of advertising, or any other related aspect of the customer- product or company competitor relationship.

 

Market research is very often conducted in the field using survey, such as consumer testing, market surveys, advertising questionnaires, etc. It seeks a through understand of the marketplace or the reaction to specific products in it. In effect, research answers specific questions about an industry, consumer, market, or product line.

 

Competitor Intelligence

Every business organization is concerned about industry and what the competitors are doing in the marketplace; their new products or services being introduced and their pricing policies. Since sales and marketing are local issues in a world where competition is global, understanding what a competitor is doing worldwide is critical to a thorough understanding of its current strategy. If actions in one market are compared with those of different markets, a much clearer picture of a business strategy can emerge.

 

New product development and introductions are much sought after information. Strategy plans; product pricing, or customer development plans can assist in formulating more effective marketing programmes for competitive products. Getting at this information requires creativity, access to a wide variety of information sources, and a broad range of contact in the industry under investigation.

 

Competitive Intelligence (CI) is not to be confused with Industrial Espionage (IE). There are many legal and ethical but creative ways to get competitive information.

 

They do not include the following:-

(1)        Stealing business secrets from competitors.

(2)        Inducing key employees to resign and bring sensitive information with them,

(3)        Buying needed information from the staff of a competitor’s organization or

(4)        Violating the law or morality.

 

Collecting Competitor Intelligence is a challenging, creative, and necessary adjunct to the information requirements of an organization. It is often considered more of an art than a science. This art involves selecting, manipulating, and using a variety of techniques to obtain the required information on behalf of the organization. The sources and methods used are the keys to a successful collection effort.

 

Counterintelligence

Remember that while your organization is trying to collect required information, your competitor is probably doing the same thing. You also are vulnerable to the attempts by others to collect required information about your business. Perhaps the competitor is not as ethical as your organization in their collection technique. Can you determine if you are being targeted, and if so, what can you do about it.

 

A counter intelligence review of your organization, its paper tray in open literature and industry sources might be very instructive. What do your competitors already know about your organization? You may as well find that there is a very small percentage of information that is really sensitive and is not easily collected. You must make every effort to protect it while you are collecting as much as possible about your competitor(s).

 

Due Diligence

Due Diligence assignment and activities include the following:-

1.         Background Investigators;

2.         Reviews of Commercial Histories;

3.         Analysis of Litigation Fillings; and

4.                  Interview with Customers, Vendors, Suppliers, Partners, Investors or Takeover Possibilities, or Clients of Potential Target.

 

A good investigation is an essential business success factor in that:-

v  It can actively support the investment process;

v  It can provide ongoing intelligence about the marketplace, the subject of a possible investment; cover or uncover previously undisclosed problems.

v  It can provide insights into previously undetected opportunities; add-value to relationships discovered in the course of the inquiry, or locate new investment opportunities.

 

Knowing when not to do the deal is sometime more important than doing the deal. To prevent mistakes, it is essential to learn more about potential acquisition targets, merger partners, investors, etc.

 

Background inquires are now a regular and preliminary part of the deal review process. Consequently, if routine inquires reveal significant discrepancies between representations and actual findings, the process can be terminated before significant costs are incurred.

 

An organization is often face with a decision about whether to invest considerable amount of time in financial analysis, due diligence, and staff expenses to prepare the deal for financing and integration into the operation of the organization. The organization may be concerned that after all the analysis they might loss not only their current expenses but also other equally attractive opportunities if the results turned out to be less than hoped for.

 

Using investigative service firms to support investment activities is not much more common than when it was pioneered for this activity in the mid-1980s. In 1987 to 1990, it was very common for 35% to 40% of the assignments to result in some type of major question being identified that either stopped the deal or resulted in modified terms being required by the lender. Fortunately, this high-risk ratio is much lower today (20% to 25%) because investigations are more often conducted at a very early stage of the review process.

 

The information required and the questions asked relating to a potential investment opportunity must include the following:-

 

a.         What is the subjects’ commercial history, e.g. are they good people to do business with?

b.         Does management really has the background and skill they claim?

c.         What does the marketplace really think about the subjects, e.g., are they respected (as competitors, for product quantity, etc)?

d.         What is the subject’ real strategy? Why are they trying to get a capital infusion? Do they plan to do what they are telling the client or do they really have an ulterior motive?

e.         Are there hidden liabilities in the product; obsolesce factor not disclosed, pending legal, tax, or regulating matters not disclosed.

f.          What are key employee attitudes towards the deal? Will key employees continue to work afterwards?

g.         Are there any organized crime connection or questionable sources of existing capital or investment involved?

h.         Do political problems exist that may affect the operations after the investment that may not exist now?

 

Knowing when to ask the right questions about the representations in a potential transaction often spells success or failure.

 

Sources of Due Diligence Information

Sources of due diligence information can be extremely broad, depending on the type of investigative questions to be answered, where the subject is located, and how quickly the information is required. The degree of discretion required to conduct the inquiry is also extremely important because it can affect both the quality of the information obtained and trust in the potential relationship if not done properly.

 

Criteria for determining how the investigation should be conducted include four levels of discretion that the due diligence staff managing or conducting the investigation must employ. These levels of discretion in handling the inquiry can raise or lower investigative costs because techniques to be employed will differ significantly.

 

They are as follows:-

1.         The subject of the inquiry should never know that an investigation has been conducted.

2.         The subject should not know that an investigation was done, but if he or she should find out it would break the deal or relationship.

3.         The subject can find out about the investigation after the deal is concluded.

4.         The subject knows about the investigation and will cooperate or can be contracted by the investigator.

 

Depending upon what level of sensitivity is required, the cost, time required and, methods of inquiry will be tailored.

 

Political Risks

Political risks’ reporting seeks to provide an understanding of the threats, vulnerabilities, and risks to your operations in specific locations in the country, foreign countries or area of the world. The collection of time sensitive information related to economic, political, crime, and terrorism issues, business policies, governmental stability, and corruption are all basic elements of these reports.

 

Reporting is providing by the following:-

Ø  Corporate employees;

Ø  Travelers;

Ø  Foreign operations;

Ø  Purchased reporting services report; and

Ø  Commissioned studies by consultants.

 

This report can be general in nature and prepared on a specific location or country. The report covers all key economic indicator, political conditions, business, and commercial factors, government stability, peace and order, and social factors. These reports require analysis for a specific organization by internal staff to determine the implications of the information contained in the report.

 

Consultant reports can also be tailored to a specific organization and its activities in a country and the impact of current conditions on the organization. Sometime combinations of both corporate and purchased reports are used to ensure redundancy and cross check recommendations and conclusions. A political risk report often is based upon the following types of specific criteria:-

 

a)         Crime and risk to personnel in the area.

b)         Corruption issues affecting business operations.

c)         Government stability and intervention in operations.

d)         Information protection and product/brand integrity.

e)                  Operational integrity – protection of business operations among others.