In many retailers, loss prevention is really a filing cabinet: incidents get written up, reports get filed, and the paperwork accumulates until someone needs it — usually too late. An operation is different. It has rhythm, ownership, priorities, and feedback. If loss prevention in your business mostly produces documents rather than decisions, it is being run as an archive when it should be run as an operation.
The filing-cabinet trap
The filing-cabinet approach is seductive because it looks responsible. Incidents are recorded, counts are stored, cases are documented — everything is captured. But capture is not management. A cabinet is passive: it holds information until asked, it does not surface what matters, it does not chase an open case, and it does not tell you that the same problem has now happened at five branches. All of that judgement is left to whichever human happens to remember. When that person is busy, on leave, or gone, the intelligence in the cabinet goes dark.
The symptoms are familiar. Cases that are opened and never closed. Incidents logged but never reviewed for pattern. Counts filed but never connected to the investigations they should trigger. A stack of reports nobody reads until an auditor or a lawyer asks. It is not that the work is not done — it is that the work does not move.
What “run like an operation” means
An operation has a small number of properties a filing cabinet lacks. Each is achievable without heroics:
- Rhythm: counts, exception reviews, and case check-ins happen on a schedule, not when someone remembers.
- Ownership: every open item has a named owner and a next action, so nothing sits unattended.
- Prioritisation: attention flows to what is material, recurring, or concentrated, rather than to whatever shouted loudest.
- Flow: a signal leads somewhere — a variance opens an enquiry, an enquiry becomes a case, a case changes a control.
- Feedback: closed cases teach the process, so the same loss is less likely next time.
None of this requires more staff. It requires the work to be organised as a live process with states and owners instead of a pile of finished paper.
Connect the signals into one flow
The reason loss prevention stays a cabinet is usually that its parts are disconnected. Counts live in one place, incident reports in another, investigations in a third, and CCTV notes in a fourth. Because nothing is joined, no one can see that the shrinkage in a category, the incidents on a shift, and the refund pattern at a till are the same story. The move to an operation is largely the move to connection: counts, incident management, and case management feeding a single view so that a signal in one shows up next to the related signals in the others.
Once connected, prioritisation becomes possible. Instead of treating every report as equal, you can see which branches, categories, and people carry the concentrated, repeating loss, and point your limited attention there. Concentration is the operational signal that a filing cabinet can never surface on its own.
Manage the queue, not the archive
A practical way to make the shift is to stop thinking about your records as an archive and start thinking about them as a queue. An archive is judged by completeness; a queue is judged by movement. Ask operational questions weekly: How many cases are open? How old is the oldest? What is unassigned? Which variances have no enquiry against them? Which incidents recurred? These are not audit questions asked once a year; they are the running vital signs of an operation, and they are what keep loss prevention from silting up into paperwork.
Accountability and POPIA both improve
Running loss prevention as a disciplined operation has two useful side effects. Accountability improves, because every item has an owner and a trail, and management can see the state of play rather than trusting that it is handled. And compliance improves, because a structured, purposeful process handles personal information more defensibly than a drawer of loose notes — which matters directly under POPIA, where you may need to show that enquiries were lawful, proportionate, and secured. A well-run operation produces that evidence as a by-product; a filing cabinet produces only the raw material.
Key takeaway
Loss prevention should be run as a live operation — with rhythm, ownership, prioritisation, flow, and feedback — not as a filing cabinet that stores work without moving it. Connect your counts, incidents, and cases into one view, manage the queue rather than the archive, and let concentration tell you where to point limited attention.
If your loss prevention currently produces more paper than decisions, a good first step is simply to list every open case and give each one an owner and a next action — the gaps become obvious immediately. If it would help to see how other retail and asset-protection teams run this as a connected operation, we are happy to walk through it.

