By Paul Ducker

Integrating security projects within a large public transport department in a state the size of Texas with just one law enforcement agency is challenging at the best of times. There are so many hurdles to negotiate whilst managing competing priorities. When you involve public assets, using public money, it’s multiplied tenfold. It all comes down to negotiation and experience in dealing with challenges such as:

• The suspicion that comes with people tasking you to secure ‘their’ asset
• The always present ‘time and budget’ restraints
• Integrating the project to complement the day-to-day operations of the asset
• Obtaining the best outcome for the organization, the staff, and the asset

Taking the easy way, just to get the project completed, is never the right way. We operate in a business where the key factor is integrity. My name is on every project, and I stand behind each one. It’s not easy. It’s frustrating and time consuming. But that’s why we are in this business.

At the ASIS International Global Security Exchange (GSX), I will present a case study detailing the sometimes ‘Australian’ methods in ensuring a project is completed on time, on target, and on budget, including:

• Red teaming and getting in the mind of the offender (breaking down the Westminster Bridge Attack)
• Providing benefits to asset managers, staff, and the organization that they never thought possible
• Reducing cameras to increase security
• Increasing protection to an asset by removing 30 bollards from a proposed construction project (installing only two) and saving $800,000

I hope you will come to session #5116, An Australian Perspective on a Security Systems Installation Project, at 11:00 am on Tuesday, 25 September. Learn a little more about our security environment, how we assess each project, and learning through mistakes and successes. You will have a few laughs and come away with some different ways looking at what you see every day.

By Jason Rosselot, CPP, CISSP

Your building is talking.

Can you quiet it down before hackers hear?

“Door held open.” “Object left behind.” “Access granted.” Building systems—from security and life safety systems to building automation and controls—generate and process data 24/7/365. Today’s buildings and the people, assets, and information protected by them are comprised of systems of systems and networks of networks. Unfortunately, most security professionals don’t speak the language of IT and cyber, and as a result, those buildings and everything in them is left vulnerable.

Is the answer to have IT take over building systems? Should the security department focus only on mechanical keyed locks and physical barriers? Do we even have keyed locks anymore? The answers are resoundingly “no”, “no”, and “yes”. While building systems are becoming increasingly connected and often leverage much of the IT infrastructure that the rest of the organization relies on, there is no reason the security department shouldn’t evolve to effectively manage their own systems and devices. Everyone in the security department doesn’t need to run out and get a Cisco certification, but clearly there is a need for at least one person on the team to take on the mantel of “security technologist.”

When Booz Allen Hamilton, who staffs a tremendous amount of the U.S. offensive cyber capability, and Johnson Controls, who helped launch the building controls industry, began discussing the cybersecurity posture of critical building systems, it was apparent to both companies that from the manufacturer to the integrator, and finally sitting with the customer, the need to raise awareness and educate was at a critical juncture. The tremendous benefits of connectivity and automation in building systems are increasingly becoming at risk as the key stakeholders in the ecosystem of building are unaware of how their action or inaction to design, develop, and deploy systems with cybersecurity built in are increasing their risk. In the case of security and life safety systems, the very systems purchased to protect assets may actually be putting those assets at risk.

Join me at 3:30 p.m. on Tuesday, September 25th at Global Security Exchange (GSX) for Session #5326, Cybersmart Buildings: Investments in Connectivity and Automation.

By Richard Smith

The horrific events in Parkland, Florida, Sutherland Springs, Texas, and, unfortunately, other locations around the U.S., have propelled a nationwide conversation on preventing and responding to an active shooter situation. This dialogue has led to an increase in training focused on empowering people to take action—to heed the DHS recommendation to ‘run, hide, fight’. By taking part in this discussion and participating in these trainings, we’re actively working to reduce the number of victims.

These critical conversations are one (very important) piece of the puzzle. We must also have a frank discussion about what happens if prevention fails. Essential to surviving the first ten minutes of a critical incident—whether it be an active shooter scenario or a significant weather event—is knowing how to control severe blood loss.

Recent mass casualty events, like last year’s hotel shooting in Las Vegas or the Boston Marathon bombings, saw lives saved as bystanders—“immediate responders” if you will—began administering aid before trained first responders arrived. Many of these immediate responders were medical, military, or off-duty law enforcement personnel who had one thing in common: hemorrhage control training.

The role of the immediate responder is a crucial one in helping people survive future active shooter events. Consider that the average EMS response time in an urban area is seven minutes—longer in rural areas—and even after EMS has arrived on scene, there may still be a delay as law enforcement secures the area. Yet a person can bleed to death in three to five minutes, depending on the severity of injury.

Can every one of those victims afford those seven minutes, or more? We must train and equip employees, security, teachers, and, sadly, even our children, to survive should the worst happen.

Join me on Wednesday, 26 September at the 2018 Global Security Exchange GSX 2018 for Session #6221, Surviving the First 10 Minutes: Increasing The Ability to Survive in Critical Trauma Incidents. I will present on the role of the immediate responder and demonstrate equipment recommended for their use.

By Brittany Galli

Why do we consistently wonder why we aren’t farther ahead in our profession or respected like we want to be? The 5 essential traits of great leaders reflect personal attributes, not roles inherent to the position. We sometimes forget how these foundational steps are the things that can either earn us the next promotion or lose us the job.

Grow Your EQ and Connections: Make authentic, valuable, strategic connections and foster them. Manners in the workplace should not be forgotten. Have you said thank you to every person on your team this week for something they’ve done, something they’ve delivered or for the way they acted in a situation?

Use Your Resources: On LinkedIn, always send a note with any connection you make. Something as simple as “Great connecting with you- let me know if I can ever help you” or “Great hearing your thoughts today on ESRM – have a great week ahead.” can help you in the future more than you know.

Be the Mentor You Would Want: Mentors get the most workplace kudos. People in the workplace will talk about you in one light or another – it’s your responsibility to make them say things like “He’s a great mentor,” or “She really helped me when I couldn’t figure out how to deal with this person.”

Self-Promotion: How do you promote yourself? Do you hang 5k T-shirts in your office or desk? Do people even know you outside of work? Do they know that you give away 100 lbs. of canned goods to families during the month? Or help with a foster agency in your spare time? Promote yourself in all facets of life and what keeps you going – people want to connect with people and they need topics to do so.

Millennials are Starving for Wisdom – Use Them! It’s now a widely found statistic that members of older generations who are receiving promotions are the ones that leverage younger generations to learn how to get ahead. Learn from millennials in your life – harness them for a 1 hour per week meeting to learn something you don’t know – Excel, Instagram or how to share photos on your phone via airdrop. Then – reward them for it. Offer your own knowledge of a leadership craft or strategy they haven’t experienced yet.

Join us Tuesday, September 25th at 11 am to learn more about these topics and Multigenerational Strategic Leadership Guidance: How to be Seen, with a strategic roadmap presented by Maria Dominguez, CPP – SVP, Bank of America and Brittany Galli – Chief Success Officer, Mobotour.

By Timothy Brewer

With 2017 and 2018 both setting unfortunate new records for the number of active shooter situations, the very real and growing threat of armed assailant attacks is clear. Events such as the school shootings in Parkland, FL and Sante Fe, Texas remind us that such atrocities are regularly perpetrated against the most vulnerable members of our society, and as security professionals we must do all that we can to address this issue.

Much excellent work is being conducted to better understand behavioral science, identify indicators of a potential attacker, and secure facilities, but such measures can never be 100% effective, and tragically, 71% of attackers are able to walk legitimately and unhindered through the entrance of the facility that they are about to attack.

The average active assailant attack lasts 12.5 minutes, while the average police response time is 18 minutes, so the majority of victims in such scenarios must therefore either attempt to escape or survive within their environment. Training, drills, and communication are key components in reducing the impacts of such attacks, but security professionals should also be aware of the role that the physical fabric of the school can play in preserving life. The opportunities to exit the building quickly, safely, and without coming into contact with the attacker(s) should be maximized, and where exit is either not possible or not advised due to the threat, physical protective measures should provide an effective shelter for occupants.

In Las Vegas this September, I will be discussing the psychology and movement of building occupants during an active assailant event and describing how security design and assessment can benefit from a better understanding of the implications of the building layout on the outcomes of the attack. Attendees can gain insight into design examples which demonstrably improve and hinder building egress under conditions of panic; better understand existing and upcoming industry guidance document on this topic; and will be able to take this knowledge into their own organizations to encourage leaders to innovate security design for active assailant threats.

Join us for Evaluating the Safety of Building Layouts In Light of Active Assailant Threats at 3:45 p.m. Wednesday, Sept. 26, at Global Security Exchange (GSX), powered by ASIS International.

By Travis Rothbloom

The computer. The internet. The smartphone. What’s next? Many believe that Virtual Reality (VR) and Augmented Reality (AR) will be mankind’s next giant leap and there are already instances where their influence has affected the security industry.

For the planning stages, the past decade has seen major improvements to building and infrastructure design with the use of Building Information Modelling (BIM). These 3D digital representations contain much more data than the traditional floorplan drawing, enabling security engineers and consultants to finalize much more of the system design early on and expedite its construction. For renovation and fit-out projects, 3D scanning gives these planners much more confidence that their renovation models are compatible with an existing site.

BIM models can also be experienced in VR. Designers can then simulate various scenarios, such as a break-in robbery or a mass evacuation due to a suspicious package, and allow different stakeholders to witness and choose between different design options based on how the situations play out. In another example, developers can be more easily convinced that spending more money up-front on landscaping that’s in accordance with Crime Prevention Through Environmental Design (CEPTD) is easily justifiable with the extra feeling of safety it brings. Security teams can begin training on their responses to various situations long before any shovels hit the dirt.

AR differs from VR in that instead of immersing somebody into a different virtual world, it takes virtual elements and places them in the real world. This enables:
• Construction workers to digitally ensure that a building has been completed to its design specifications by overlaying the BIM model in full 3D onto the site
• Security teams to continue training to virtual crisis scenarios overlaid onto their actual building
• Public to receive, to their smartphones, visual step-by-step directions to the proper evacuation or lockdown location
• Guards and first responders to react to active security situations while having real-time access to the electronic security systems at their fingertips

On the last point above, the rise of AR along with 3D sensing systems integrated into CCTV can allow a responder to effectively see people through walls, ceilings, and floors. The responder can then simply point to a door to place it in lockdown to better manage the situation. AR can also take a 3D scan of a past crime scene and overlay it back onto its original location, allowing for more detailed forensic analysis.

Join me on Monday, September 24th at GSX 2018 for Session #4301, How Augmented and Virtual Reality Affect Security. I will be presenting on all of the above use cases and giving a live demonstration of what the future has in store.