Business Process Re-engineering at SSL: A Comprehensive Report

Desklib provides solved assignments and past papers to help students succeed.

Introduction
In this report, we are discussing an organization which is SSL (Security Services Limited) whose
goal is to become one of the main suppliers of private services in the United Kingdom. SSL has a
variety of range of services and various departments which deal in different sections such as
sales, accounts, finance, marketing, and purchasing sections. The way of working of the SSL
organization is not appropriate. So this report deals with various strategies adopted by the SSL
organization to get more benefits in their business. It also deals with how business process
reengineering helps in getting benefits to the organization.

Security Services Limited
The growth of the SSL organization is increasing from the past thirty years in order to become
one of the top providers to provide the best security services in the United Kingdom. SSL
provides a variety of services. If we talk about the growth it increasing for sure but the approach
they are following in their business is not perfect. So if they want more and more benefits in the
future they have to change their way of working.
SSL organization consists of four divisions which are private transport div., business security
div., domestic security div. and home-offices security div.
PTD
In this division, it contains a department of sales which works effectively as it is managed by the
sales manager present at headquarter. The sales department of different areas is controlled by the
sales coordinator and it also has many sales employees. I the department of marketing there are
very few people to control the marketing as his section is very important in advertising the
products and services so more costing in this department should increase to so that large
investment is assessed. It also contains a transport department which involves in making the
schedules of which vehicle will be used in which routes and which security team is allotted to
which route. In this department, proper servicing of vehicles and staff should be controlled
efficiently. In this department functions related to the information security are monitored by a
person who is not experienced in this field and have only a little experience so IS function should
be managed by the person who is expert in this field in order to assess more investment in future.
BSD
In this division, there is no group to control the marketing department so a proper team should be
formed in this department to advertise the products and services. All the information related to
the sales is stored in the ledgers which should be avoided as saving the data offline cannot last
very long.
DSD

In this section, no investments are done in information security and there is no team or individual
in this section who have the knowledge and experience in information technology. All the data is
stored manually in papers and then circulated so this division has to adopt various strategies to
enhance the working of this division.
HOSD
This department uses the latest technologies in all the departments and it is also better as
compared to the other divisions. It helps the organization to get more and more profits.
There are some methods to measure information security investments.
Standard Deviation- It gives the difference in the current investment and the expected
investments if the deviation is more than more risks are associated which should be minimized.
Beta- It is the method for measuring the risk in the investment. It describes to what extent the
information security is volatile as compared to the current market value. (Segal, 2019)
There are various coherent strategies that must be constructed by private security
companies to increase the benefits in the future:
 Every organization must create their mission statements which are able to describe the
depth of their business in one or two sentences. The mission of the SSL organization is to
become one of the top providers in the United Kingdom to provide private services.
These organizations should develop a place where the client can get all the private
services they want.
 The organization should describe their objectives. A list of all the goals should be
mentioned like what are the expected earnings of the organization.
 An organization must organize SWOT analysis which means internal strengths &
weakness of the organization can be determined and what are the threats associated with
the organization.
 After performing the SWOT analysis we will able to determine what are the factors
which can help the organization in reaching its objectives and goals.
 An organization must always construct the strategies and all the necessary actions should
be described which helps in reaching the objectives. All the necessary steps should be

noted which helps in overcoming the threats and issues and the strength of the
organization should be utilized for the advantages.
 While developing a strategy assign role and responsibility to every member who is the
part of the strategy.
 By defining the values of an organization. Values are the missions of an organization. TO
develop a coherent strategy it is very important to understand and establish the values of
the organization. These values describe various ambitions and the space in which the
organization works. So missions should be defined, the scope should be established,
inspirations should be determined, what are the expectations from the other people and all
the values should be announced.
 All the opportunities should be explored. Opportunities are basically the positions in the
competitive market so that values for the stakeholders must be created. The structure of
the organization must be defined in which field an organization is doing competition with
the others, different competitors should be determined. The marketing structure of the
organization must be analyzed and how this structure is affecting the dynamics of the
competition.
 All the needs of the clients must be satisfied for which they are demanding.
 The capabilities of the organization must be determined. Capabilities are the strengths of
the organizations. Chain of values must be determined, assessments should be done
regarding whether the capabilities are complementing each other or not and the
capabilities are unique or not and they are providing the advantages in the competition or
not. The durability of the capabilities must be determined, what are the other capabilities
that should be developed in the future.
Role of Information system and technology in business
Information systems are very important for the smooth running of the business and monitoring
the business properly whereas information technologies are essential for controlling the
production in the organization and it helps the organization, owner in earning the large profits.
The information system in the business is the method by which data is collected and shared in
the business. By information system carriers can be made in different fields such as Sales,
finance, marketing, etc. It helps in reaching the goals of the organization. (Melville, et. al., 2004)

Systems related to the sales and marketing helps in determining the base of the customer for
various products which are a sale by the company. Through this, more and more profit and sales
can be increased. Production of the company is managed by the production system as it involves
planning and development.
The finance system and accounts department maintain the track related to the funds which are
used in manufacturing the products. Profit & Loss can also be determined by these systems.
There is a system called the human Resource system which maintains the records of the
employees and the performance. Various latest and advanced technologies help in enhancing the
performance of the organization as well as production. They help in generating more revenues.
They also save a lot of money as well as a time when decisions are made.
They minimize the errors of the humans and it uses complex algorithms. The main advantage of
this technology is that much time is saved in performing manual analysis and more focus of the
employees is on the business. This technology helps in processing data from many sources.
Different types of information systems are present which perform different functions like
Business Intelligence systems. These systems help in taking the best decisions in the business
and resources are allocated more effectively. Visualization of the data can be achieved which
helps in interpreting the quantity of data, it also helps in predicting the events in the future. ERP
software is also used by organizations to manage information in different areas. This system
contains various applications that give 3600 views in the operations of a business. Examples are
Odoo, PeopleSoft, etc.
They help in taking decisions at each step. It maintains all the records related to finance with
accuracy and with up to date. Costs related to the operations of the organization are minimized &
collaboration is enhanced and performance is increased.
Business Process Reengineering (BPR)
Business process reengineering is a way by which business is reconstructed in order to achieve
the goals in terms of increasing the overall performance, improving the output and minimizing
the costs. This process is used to determine the loopholes of the organization and it performs
necessary modifications to increase the overall performance of the system. This concept arises in

the year 1990s. It was developed because many other organizations were using the latest
technologies for improving the functionality of the system although BPR is not easy to perform.
It consists of various steps and if these steps are not performed successfully then efforts made in
changing the system will be failed. (Neill & Sohal, 1999)
BPR can bring benefits or losses to the organization if not performed properly.
BPR will be beneficial if:
The needs of the clients are given the priority and all the steps are performed properly and if all
that resources which are of less importance are minimized.0
BPR will not be beneficial if:
Only minor changes are performed in the current processes and if very little effort is made in
designing the system again. If all the aspects are not studied in detail and changes are not done
where the requirement is.
Information Security Functions
Information security functions are very important functions in the organization as it helps in
protecting the information from the others. These functions provide confidentiality, integrity, and
availability to the users.
Confidentiality- It controls the access of the users and describes which user can have access to
read the content of the file. It helps in preserving unwanted restrictions and protects all the
information and avoids disclosing of the information to others.
Integrity- It describes that all the changes in the information and the programs are done in a well
authorized and specific way. It also protects from improper changes or modifications.
Availability- It ensures timely and proper access to the information. It also ensures that the users
who are authorized have access to the data & resources. (Thomas, 2010)
These information functions help in protecting an organization from malicious activities. SSL
uses these functions so that their data can be kept confidential and the availability of the data can

be maintained throughout the system for all the authorized users. Relationships can be
maintained with the other partners of the business.
The location of the information security functions is determined by the entire organization and it
is the place where there is the requirement of balancing the needs.
It can be placed anywhere in the company:
Information security functions- It gives a more appropriate view for maintaining the
infrastructure of the company.
The function of physical security- They are used for various services related to the protection.
Insurance & risk management functions- They are used because the risk is associated with the
organization.
The location should be selected such that there is competition in that location between various
organizations and the selected location should be visible from the market and the population in
terms of humans should be more in that area. The location should be such that it has power
facilities as required for establishing the organization. If these factors are not met in a particular
location then that location should not be preferred for the organization.

Conclusion
A report has been created successfully which covers all the methods and strategies which are
required by the SSL organization in order to get more benefits. We have also discussed business
process reengineering and it has been concluded that there are many stages of BPR and if all
these stages are performed successfully then BPR will provide more benefits in the organization
and if these are not followed properly then many risks can be associated with the organization.

References
 Thomas, 2010. Locating and managing the IS security function, arstechnica, Available
at: https://arstechnica.com/information-technology/2010/01/where-to-locate-the-is-security-
function-and-how-to-manage-it/
 Troy Segal, 2019. Common Methods of Measurement for Investment Risk Management,
investopedia, Available at: https://www.investopedia.com/ask/answers/041415/what-are-
some-common-measures-risk-used-risk-management.asp
 Martin, 2014. Making your Business more competitive with business process
reengineering (BPR), cleverism, Available at: https://www.cleverism.com/business-
competitive-business-process-reengineering-bpr/
 Neill, P.O., & Sohal, A.S., 1999. Business Process Reengineering A review of recent
literature, vol. 19, no. 9, pp.571-581.
 Melville, Nigel., Kraemer, Kenneth., & Gurbaxani, V., 2004. Information technology and
organizational performance: an integrative model of its business value, vol. 28, no. 2,
pp.283-322.