Gold Security

Why gold mining security is fundamentally different

Gold is unlike almost any other commodity a security professional encounters. Three characteristics make gold mining security uniquely demanding and uniquely consequential when controls fail:

Extreme value density

A standard one-kilogram gold doré bar fits in the palm of a hand and represents tens of thousands of dollars. A single pocketful of high-grade material from a processing circuit can be life-changing for an opportunistic insider and serious revenue exposure for the operator. No other industrial commodity concentrates this much economic value into this small a physical envelope, and that single fact reshapes the entire risk profile.

Liquidity and convertibility

Stolen gold is trivially easy to convert to cash through grey-market refiners, scrap dealers, and informal networks that exist in every gold-producing jurisdiction. Unlike most industrial assets, recovered stolen gold cannot easily be identified or traced once it has been re-melted or chemically processed. The market for stolen material is functionally liquid, which removes one of the natural deterrents that exists for other forms of industrial theft.

Continuous exposure across the value chain

Gold is not simply mined and shipped. It is dissolved, adsorbed, eluted, electrowon, smelted, refined, and assayed across a long industrial value chain. Each transformation creates a discrete exposure point, a place where the material is accessible, where it is being handled, weighed, or moved, and where insider knowledge of the process can be converted into opportunity. Sustained gold security requires controls designed for every one of those stages, not just for the perimeter or the gold room.

Where gold theft actually happens

Across the gold value chain, security exposure is rarely uniform. Two decades of advisory work across gold operations in Australia, Africa, the Pacific, and North and South America, consistently surface the same pressure points:

Pit-to-mill ore movement

High-grade ore from the pit is most vulnerable during haul, stockpiling, and feed to the crusher. Selective high-grading by truck operators, deliberate misrouting of ore parcels, and exploitation of weak grade-control documentation are common findings. The operational pressure to keep production flowing often defeats slower, control-driven processes.

Processing circuit access points

CIL (carbon-in-leach), CIP, and heap-leach circuits are the heart of most gold security exposure. Loaded carbon stockpiles, elution columns, and electrowinning cells all carry concentrated value and require routine human access for maintenance, sampling, and operational adjustment. Where access is uncontrolled or where sampling protocols are loose, exposure compounds.

Gold room and doré handling

The gold room is the most obvious target but often the most heavily controlled. Real exposure here is rarely from external attack, it is from insider collusion, sampling fraud, and weighbridge manipulation. Doré handover between the gold room and dispatch logistics is a recurring pressure point.

Reconciliation and assay integrity

Where mass balance reconciliation is poorly governed, theft can be concealed inside the noise of unaccounted losses. Tampered sampling, biased assay results, and weak chain-of-custody on metallurgical samples are mechanisms by which large losses can be hidden in plain sight over extended periods.

Transport and refinery interface

Off-site movement to refinery introduces third-party handling, multiple custody transfers, and exposure to organised criminal interest. Refinery-side reconciliation discrepancies are a frequent trigger for investigations.

The Hartley Garland gold security framework

Specialist gold security advisory is not generic security advisory applied to a mine. It is a structured discipline built around the specific risk profile of gold operations. Our framework moves through four integrated stages:

1. Threat and exposure mapping

Before designing controls, we systematically identify where value is most concentrated, where access is most permissive, and where existing controls are weakest. This is not a generic risk register. It is a gold-specific exposure model that follows the material through every transformation in the value chain. (See our threat and risk assessment service for the standalone methodology.)

2. Defensible control design

Controls must be proportionate, operationally viable, and capable of standing up to audit. We design layered controls, physical, procedural, electronic, behavioural, that match each identified exposure. Crucially, controls must integrate with production realities; over-designed controls that production teams quietly bypass deliver no security at all.

3. Assurance and reconciliation integrity

Strong sampling protocols, defensible chain-of-custody, and structured mass-balance reconciliation are the difference between catching theft early and discovering it years later. We help operators establish reconciliation regimes that detect both the magnitude and the pattern of unaccounted losses, which is the foundation for any subsequent investigation if one becomes necessary.

4. Governance, training, and culture

Technical controls without governance and behavioural reinforcement degrade over time. Gold security maturity requires standing review cycles, structured training, and leadership engagement at the GM and executive level. We help operators embed gold security in the way the business is run, not just in a procedure folder.

Common findings from gold security audits and reviews

Across reviews, several patterns recur with surprising consistency, regardless of operation size or geography:

• Reconciliation losses tolerated as “noise” that are in fact systemic;
• CIL carbon handling protocols that look strong on paper but lack independent verification;
• Gold room access controlled formally but compromised informally through familiarity;
• Sampling and assay processes that can be quietly biased by a small number of individuals;
• Insider risk assessments that focus on the gold room and overlook earlier value-chain stages;
• Procedural controls that have not been updated as plant configuration evolved.

None of these are exotic, they are the everyday weak points that mature gold security programs explicitly address.

What world-class gold security looks like

The strongest gold security programs we have seen share a small number of characteristics that operators can use as a benchmark:

• Material flow is fully mapped from grade-control through to refinery, and every transformation is treated as a security-relevant event;
• Reconciliation is run as an assurance discipline, with independent oversight and structured variance investigation, not as a metallurgical afterthought;
• Insider risk is treated as the primary threat, not external incursion, informed by the reality that the overwhelming majority of substantiated gold losses involve insider knowledge or collusion;
• Security is engineered into capital projects from feasibility, not retrofitted into operating plants. (See project security design and pre-feasibility security input.)
• Board-level visibility exists for the gold security risk position, and the GM owns it operationally;
• External independent review is run on a defined cycle, because internal teams cannot effectively audit the controls they themselves operate.