2004. (www.bichardinquiry.gov.uk) In many of the documents provided in
evidence to the ... record number of entrants for the CPP this year. Barry Walker
does a ...
ASIS
The 208 Newsletter “Voted Chapter Newsletter of the Year 2003 by ASIS International”
Missing Prosecutions and Cautions BY CHRIS BROGAN MA
A recent project commissioned by the Postal Services Commission has highlighted a concern shared by numerous public authorities with prosecuting powers. The following is an abridged version of the report. The full report can be found on the Beyond Print pages of the UK Chapter website (www.asis.org.uk)
Cautions The same prosecuting authorities issue criminal cautions in accordance with the Home Office Guidelines 18/1994 and will be issuing conditional cautions in accordance with the Criminal Justice Act 2003. These cautions are intended to reduce the cases that clog up the Magistrates and Crown Courts. A caution will be issued where the designated officer considers it an appropriate way of dealing with the offence. Many of these prosecuting authorities would not have access to one another’s records of prosecutions and cautions, or have access to the PNC. This leaves them in a situation of not being aware of all the necessary intelligence that would allow them to consider the appropriateness of issuing a caution as opposed to going for prosecution.
Some considerations Consider the following consequences of this situation. 1. The Criminal Records Bureau is the Gatekeeper to recordable offences that could affect the employment of persons who will have responsibility for children and vulnerable adults. It is recognised that for persons with this responsibility there should be in place a vigorous vetting process. This has THE 208 NEWSLETTER - SUMMER 2004
been stressed in no uncertain terms in the Bichard Report, published in June, 2004. (www.bichardinquiry.gov.uk) In many of the documents provided in evidence to the Bichard Inquiry, reference was made to where the employing authority would ask the applicant if he had any criminal convictions or cautions. The applicant would then give permission for the authority to access the CRB to verify his statement. As this project has demonstrated, the CRB would not have access to all the criminal records and therefore the vetting could be inadequate. We would ask the following question. Should children be taught by a person who has: a) Been cautioned on numerous occasions by local housing authorities for housing benefit fraud? b) One if not more prosecutions for nonpayment of a TV licence c) Been cautioned by the Postal Services Commission for interfering with mail? d) Been cautioned by the RSPCA for cruelty to animals? 2. A Police Officer or other designated officer of a prosecuting authority will, from time to time, have to make a decision as to whether the issue of a caution is the appropriate way of dealing with an offence. If the officer is not in possession of all the facts, he may decide on the issue of a caution. If he had been aware of all the facts and it had been left to the judiciary, the accused may have ended up with a custodial sentence, which would have continued on page 3
THE 208 NEWSLETTER
W
hen the police take an action through the Crown Prosecution Service, the onus is on the police to place the outcome of the case on to the Police National Computer. Many prosecuting authorities take their own action through the courts. As the police are often not involved in these prosecutions, they rarely appear on the PNC.
www.asis.org.uk
SUMMER 2004 1
ASIS CONTENTS 1
2
Missing Prosecutions and cautions Chairman’s Notes Patricia Knight
3 4 4
CPP Corner Webwatch RVP report from Peter French
5
Doing business in Europe
5
Mervyn David award winner
6
The Northern Network
7
Information Security Survey 8 A Roadmap for Sucess 9 Chapter Seminar 10 Oops!!! 11 Forthcoming Events 11 Member News ESSENTIAL INFORMATION EDITOR – Charles Thompson, CPP (01634 400395). EDITORIAL BOARD – Helene Carlsson (020 8840 5571); Bob Cottrill, CPP (01277 362230). ADVERTISING – Mike O’Neil, CPP (0118 945 4895); Graham Bassett (020 8626 3100). PUBLICITY – Mike Hurst (020 8385 7881). ADMIN. MANAGER – Jude Awdry, ASIS UK Chapter 208, PO Box 208, Princes Risborough, HP27 0YR. Tel: 01494 488599; Fax: 01494 488590; e-mail:
[email protected]. MEMBERSHIP ENQUIRIES – Nigel Flower, CPP (01276 686026 - email:
[email protected]) PUBLISHERS – The 208 Newsletter is published by Chapter 208 of ASIS International. FREQUENCY – The 208 Newsletter is published four times per year, Spring, Summer, Autumn & Winter and editorial deadlines are, respectively, 30 March, 30 June, 30 September and 20 December. IN GENERAL – The 208 Newsletter welcomes articles & photographs, but while every care is taken cannot be held responsible for any loss or damage incurred while in transit or in our possession. Please send all material to the admin. office. The Newsletter may publish articles in which the views expressed by the author(s) are not necessarily those of ASIS.
ISSN N0 – 1350-4045 2
It is supposed to be Summer but looking out of my office window at the rain steadily falling, I cannot help wishing for sunnier climes. However, in the world of ASIS International, all is not gloom and doom! I am very pleased to announce that Bruce George is the very deserving winner of the Mervyn David Award. The award is presented each year to someone whom we feel has made an outstanding contribution the security industry. Bruce is a very busy man but we hope to have the opportunity to present the award to him at our AGM in November. Since our last Newsletter was published, a number of issues have arisen that are of interest to our members. One of these, the Draft EU Directive, has caused much discussion and is being reviewed by the SIA, in consultation with a number of industry bodies, including ASIS. Thank you to all those who took the time to respond to the papers we circulated. We will report as matters progress. I am very pleased to say that we have a record number of entrants for the CPP this year. Barry Walker does a fantastic job in organising both the study sessions and the examinations and it is largely due to his efforts that we achieve such good results. Barry and his team have been nominated to receive an award from HQ again this year and I very much hope that they will be successful. Our Seminar at Sun Alliance, Horsham was very enjoyable and we are very grateful to Matt Walker for his superb hospitality. I must also thank Wilf Knight for volunteering to organise the Seminar, with very little duress from the Chairman. Our speakers were informative and entertaining and the feedback from attendees has been very positive. In spite of the out-of-town location, a respectable number attended and I was delighted to meet some members who had never attended a
seminar before. I should like to draw your attention to the item in the Newsletter on Martin Gill’s research project. Chapter 208 is supportive of the initiative, which should provide the Industry with information that has never previously been available to us. You may be aware that Perpetuity Press is partly owned by Leicester University. We are fortunate in having good relations with a number of educational establishments and we reap the benefits that this relationship brings. Martin has promised to keep us abreast of developments. As always, I would ask you to make a note of forthcoming events listed in the Newsletter. Our Golf Day, once again ably organised by Stuart Lowden, is on 2 September and our next Seminar is on 16 September at GlaxoSmithKline, Stevenage, courtesy of David Hamilton. I frequently hear from new Chapter members when they join and I would stress that any comment that our members make on what they would like from their ASIS membership is welcomed, as this enables the Committee to plan for the future. Many members have told me that one of the values of membership is the facility to exchange information world-wide. In these troubled times, information is vital in combating the terrorist threat. Many organisations, for a variety of reasons that I do not have space to discuss here, are reluctant to discuss sensitive issues outside of their own walls. The Chapter is doing its utmost to encourage an honest exchange amongst responsible people. Remember, your information, in the right hands could save lives. Last, but certainly not least, many of you will already know that David Dickinson, Chief Executive of the BSIA, has had an operation on his heart. I am told that he is doing well following the surgery and I am sure you will all join me in wishing David a speedy recovery. Happy holidays to one and all and I look forward to seeing many of you at the next Seminar. Regards
THE 208 NEWSLETTER - SUMMER 2004
The 208 Newsletter
MISSING PROSECUTIONS AND CAUTIONS continued from page 1
Consequences for Vetting
appeared on the PNC. It would then have found its way on to the Criminal Records Bureau and been accessible by an authority who may at a later date be considering employing the accused in a capacity involving a child or vulnerable adult. 3. A judge when sentencing an individual would look at his previous criminal record. If the judge does not have access to all the records, then he cannot make an informed decision. 4. The Court Service, when deciding on juries, checks a percentage of them through the Police National Computer. They are looking for any criminal background. If they do not have access to all the criminal records then they cannot make an informed decision.
This also has consequences for the vetting procedure and those who are involved in it. Come October/November when Part V of the Police Act 1997 becomes fully operational, the basic disclosure through the CRB will become available to those organisations that can justify it. If the CRB does not contain all the criminal records pertaining to an individual, the vetting procedure could, in effect, give a clean bill of health to an applicant when he may well have a string of criminal prosecutions and cautions that demonstrate a criminal mindset. As the Security Industry Authority begins to license those involved in the security industry, they could well find themselves in a situation of issuing a licence to a person as described above, which would tend to defeat the object of the Security
CPP CORNER Dennis Ahern, Security and Safety Manager at Tate Modern, recently decided to cement his professional status by studying hard for - and subsequently attaining - the Certified Protection Professional (CPP) qualification. Dennis was recently interviewed by Security Management Magazine and had this to say about the CPP experience. “CPP was brought to my attention by Chris Smith” (now the head of regional security for Europe, the Middle East and Africa at HSBC Bank plc, but once Ahern’s manager at Forte Hotels). “I’d been sizing up various options for obtaining a documented and certificated professional qualification to state that I’d attained a certain level of knowledge and skill in the security arena. CPP offered me an excellent way of doing so that didn’t necessarily entail a significant amount of academic time out, which I really wasn’t in a position to accommodate.” The examinations for CPP are tough and there’s a good deal of self-learning involved, but Ahern wasn’t THE 208 NEWSLETTER - SUMMER 2004
Industry Act.
National Intelligence Database The Home Secretary, as a result of the Bichard Inquiry into the Soham murders, has thrown the full weight of his authority behind the development of a National Intelligence Database, accessible by all law enforcement. Unless these hidden criminal records are put on to a central database, accessible by law enforcement and other authorised bodies, the National Intelligence Database will not be as effective as it is intended to be. Chris Brogan is Managing Director of Security International Ltd (www.securitysi.com). He can be contacted on 020 8847 2111
dissuaded from his goal. “The way in which the UK Chapter of ASIS International runs things, with working weekends at Loughborough University, is excellent,” assures Ahern. “CPP has really made me apply my theory in a focused manner.” Further information about this year’s CPP study programme can be obtained from Barry Walker, CPP [
[email protected]]
Study Material - POA Manual At the end of 2003 ASIS International purchased the Protection of Assets (POA) Manual and related assets from POA Publishing, LLC. The manual is an important and major reference source used by many members and certification candidates. If you have queries regarding subscribing, renewing, and updating your manuals. the education department has compiled a list of the Frequently Asked Questions (FAQs) that are received at headquarters. To access the FAQs and other related information visit the certification web site at http://www.asisonline.org/certification/announcem ents.xml to view
3
ASIS Research Highlights. There is a handy navigation bar at the top of the screen to access the information. Please note that some parts of the site are still in the first stage or under construction.
RVP REPORT FROM PETER FRENCH, CCP Developing an association with 33,000 global members is a major task by anyone’s imagination. To change attitudes and be willing to listen to a broad church of opinion is an undertaking that the ASIS International Executive facilitates each year. Having now been personally involved over 4 days and seen the professional approach undertaken by Alexandria in developing the ASIS Strategic plan, this is a movement that is prepared to develop its global presence through local stakeholder participation – its membership. As members of the European Advisory Council, Edward Emde (RVP for region 28) and I were asked by Michael Stack if we could attend, with 14 others, the Strategic Planning Committee. We had our influences removing the words ‘security industry’ fairly often and substituting the more inclusive words ‘security professional’; developing thoughts on how to continue globalising the brand of ASIS; and asking ourselves “What do the majority of international members want? Not surprisingly International members have generally the same issues, wherever they are. It is just that sometimes the terminology is different. I referred to this as “ taking the zs out of reorganize” and on one page of our notes the
4
Compiled by Charles Thompson CPP
THE EUROPEAN CRIME PREVENTION NETWORK (EUCPN) The site has been launched as a resource for all those interested in European crime prevention policies and practices. The homepage provides an overview of EUCPN initiatives with background and objectives, contact points, links to crime prevention policies, EU Member States Crime Profiles, and Good Practices and facilitating team did just that, to the amusement of our north American members. Over the meeting I was chastened, as I continually had to be reminded that “you” (USA) and “us” (Europe) terms of reference should be replaced with “ASIS member”, but I nearly got there in the end. Region 25 is seriously focusing on establishing a chapter in France, it is a shortfall in our global standing that we have 33 members without local structure. There is legacy associated with this, but to kick-start the future I am planning to hold an integral dinner in Paris, possibly in October – so everyone will be invited.
POLICE ON-LINE Did you know that you can now report nonemergency minor crime by informing the police on-line? This saves the hassle of trying to contact your local area police station by phone, the number of which may be hard to find, and where frequently the manning of phones may be less than satisfactory. The site is at: www.online.police.uk.
NEW LINKS In addition to the above sites the following new links have been added to the Chapter web site (www.asis.org.uk) Liaising with Edward, the Europe region hopes to have established a chapter in Prague by the end of this year, in addition to the Greek chapter he established in June. The benefit that members get from a more decentralised approached to Society management hopefully is recognised already by our members. The first offering of the Euro-dynamics is part of that process. Chapter 208 asked the Brussels office to co-ordinate comment that had been raised within the Chapter Committee, via our membership and through the BSIA, as to the issues raised with the EU Directive on Services in the Internal
UK LINKS Crime Prevention: http://www.crimereduction .co.uk/ Acronym Finder: www.acronymfinder.com. Information Security (Conduct a Health Check): http://www.ukonlineforbusi ness.gov.uk/healthcheck/i ndex.jsp Security Industry Authority (SIA): http://www.the-sia.org.uk/ National Criminal Intelligence Service (NCIS): http://www.ncis.co.uk/
INTERNATIONAL LINKS Fraud – GHHSR monthly newsletter: http://www.ghhsr.com/inde x-gb.htm Market. The ASIS Brussels office was able to reach across our 1808 members for their opinions. My concern is that we, the membership, do not engage. As to why that should be, each of us will have our reasons. But if we are interested in seeing a Europe-wide regulated security profession, ASIS International is our vehicle. The Commission will be the place to be, to be consulted regardless of the emaciations gendered by the pushing of some nations for a closer or deregulated Europe. ASIS members are hopefully professionally engaged individuals who want to make a difference.
THE 208 NEWSLETTER - SUMMER 2004
The 208 Newsletter
DOING BUSINESS IN EUROPE EU Directive on Services David Jones of T-Mobile reports
A
DTI sponsored seminar for the EU Directive on Services in the Internal Market took place in London on Friday 11 June 2004. Margot Froehlinger, from the EU Commission, outlined that there is still a huge gap between a free EU market and practical business experience, which is hampered by barriers and excessive bureaucracy.
AIMS The Directive aims to achieve administrative simplification by removing complexity and ultimately to make the opening and operating of businesses in other member states a simpler and more efficient process. It will cover any business that operates for economic benefit and includes both the private and public sectors. The Directive will enhance, rather than replace, existing regulations and other community instruments will continue to apply, for example Working Time Directive, Health and Safety Legislation etc. Freedom to provide services is implicit within the Directive and was probably the main concern for attendees at the seminar who included representatives from the Trade Unions, Insurance industry, the SIA and many others.
TEMPORARY SERVICES When providing services on a temporary basis a business need only comply with the Country of Origin rules and
regulations regarding how that business operates. A security company from another member state would therefore be entitled to provide security services in the UK market on a temporary basis even though it was subject to far less regulation in its country of origin. This may effectively undermine any current or future licensing scheme introduced by the SIA. The definition of temporary is not clear, but it seems that temporary status would apply until a fixed business infrastructure is established in the host state. Once established, and therefore no longer classified temporary, it is my understanding that the business must then abide by host nation rules and regulations governing that commercial activity. Derogations from the Country of Origin principle do apply and currently the Cash In Transit business is exempt; it may be possible that other disciplines within the security industry can be similarly classified. During questioning Margot Froehlinger expressed the view that a pan European license may be a way forward for the EU security industry.
FURTHER INFORMATION The SIA are collating the views of security-related organisations including the Association of Chief Police Officers, British Transport Police, Association of British Insurers and others. Although the public consultation phase ended at the end of June, the Directive is not expected to be implemented until 2008, and the DTi will continue to consult with organisations to ensure their concerns are communicated to the Commission. The web address for further information is www.dti.gov.uk/ewt/servgen
MERVYN DAVID AWARD WINNER 2004 In 2001, Chapter 208 created the Mervyn David Award as a memorial to a past, hard-working Chapter Chairman who had successfully led the UK membership during a period of change and significant growth. Mervyn, an ex-Director of Security with the Shell company, dedicated his energies to promoting the abilities of the security professional as a partner to business. Previous winners have included Paul Barker, BG Group, for establishing the first European Certified Protection Professional (CPP) training resource centre and Hans Wermdalen, who combining an executive role with Securitas, was the International Director of ASIS International for 3 years after being the Regional Vice President of the European region. In Bruce George, MP 2003, Geoff Whitfield, Security Director of GSK Research, received the award at the Chapter’s annual Ball for his work in representing the security profession during the period of Government consultation on licensing of the Security Industry and for his pivotal work in establishing The Security Institute in the UK. Our winner in the current year is the Rt. Hon. Bruce George, MP. Bruce has a 30-year interest in the security profession, with particular emphasis on private security providers and establishing a regulatory framework within which approved companies would have to legally operate. Bruce is the current chairman of the House of Commons Select Committee on Defence. THE 208 NEWSLETTER - SUMMER 2004
5
ASIS The Northern Network Life Vice-President Bill Wyllie currently Head of Security MBNA Europe reports on a recent UK regional initiative jointly sponsored by Chapter 208 and The Security Institute. 28 April saw a new venture unveiled in Chester. Many UK security professionals belong to one or another of the national professional security associations that exist, but demographics frequently mean that events and dialogue become London-centric. Recognising this fact, Chapter 208 of ASIS International and The Security Institute joined forces to sponsor a seminar on the Chester Business Park. Hosted by Bill Wyllie, the day brought together some 30 security professionals from the region, alongside others who had travelled from as far as London and even Dorset for the occasion; About 50% of those present were not members of either of the sponsoring organisations. The first speaker was Gary Mercer of DISC Security Solutions, who gave a very useful overview of networked security solutions, focusing particularlyon the relative merits of analogue and digital systems. Gary was followed by Stuart Lowden of Wilson James, who gave his usual virtuoso exposition in dealing with the impact of licensing of security staff. After a buffet lunch, Mike Williams of CDC spoke entertainingly on the subject of integrated systems for buildings, demonstrating the breadth of experience that he has in that field. The day was rounded off by a presentation on the charity Crimestoppers, given by Graeme Gerrard, the Assistant Chief Constable of the Cheshire Constabulary, an old friend known to
many of us and wearing his ACPO/CCTV hat. What was most remarkable was the level of discussion that each topic generated. Each speaker was put to the test with sometimeschallenging questions, and it was clear that each presentation stimulated genuine interest amongst the delegates. The “new venture” is what has come out of the day. Those attending resolved upon the formation of a loose networking organisation, provisionally entitled “The Northern Network” although already some its members come from quite a way further afield. Bill Wyllie says: “We are not creating a formed body with a committee, a budget, or a schedule of events. What we are creating is a “virtual” addition to the many London-centric groups to which many of us belong, and we are doing that in order to encourage communication and dialogue between security professionals in the north-west. I am happy to maintain an e-mail contact address list: but participants need to know that I will not be conducting any significant vetting of who is placed on it. Participants will be able to use this overt list to communicate about forthcoming events, raise awareness of current issues, propose meetings, seminars or other gatherings, or to ask for assistance on, for example, new procedures or equipment. But, if suppliers, say, try to use it to send out advertising literature, that practice will result quickly in the death of the Network”. Anyone who wishes to join the Network should contact Bill Wyllie by e-mail at:
[email protected]. Bill stresses that he is not centre-stage in the Network - “Centre stage will be held by whoever is taking an initiative, starting a debate, asking a question or arranging a function.
The DVR choice of security and IT professionals worldwide. With advanded recording and management capabilities - including scalable enterprise services - high capacity storage, and powerful IP networking features, March Networks' complete line-up of Linux-based DVRs are providing customers around the world with the performance and reliability they demand. Contact March Networks today for a Certified Solutions Provider nearest you.
www.marchnetworks.com 1.800.563.5564 BANKING
6
RETAIL
TRANSPORTATION
3000 SERIES DVRs Essential video and two-way audio capabilities in easy-to-install and maintain, 8-camera platforms
4000 SERIES DVRs Full-featured systems that scale to support thousands of cameras across hundreds of locations 5000 SERIES MOBILE DVRs The industry’s most rugged DVRs, purpose-built for mobile and harsh environments
FIRST RESPONDERS
FACILITIES
EDUCATION
THE 208 NEWSLETTER - SUMMER 2004
The 208 Newsletter
Information Security Survey In June the DTI released the results of its bi-annual survey into information security breaches, the seventh such survey since it started in 1991. The summary findings are as follows: • a changing business environment resulting from increased use of the internet • security threats increased as a result of increased connectivity • numbers of businesses suffering security breaches rise as a result • some progress in putting security controls in place • many companies lack expertise to address security • spend on security not seen as an investment 90% of UK businesses use email, browse the web and have a web site. More than 50% of business allow remote access and a third of businesses enable such access through personal digital assistant with a similar percentage using wireless access. At the same time dependency on electronic information and systems has grown to 87% and just over half store confidential information on computers, security breaches are thus more damaging. Security incidents are increasing as a result of malicious actions, including viruses, unauthorised access, misuse of systems, fraud and theft. Virus infections and inappropriate use of systems by staff are the most significant cause of these incidents. Malicious incidents are now more common than accidental systems failure or data corruption, reversing a previous trend. On average UK businesses experience one security incident a month, as compared with one a week for large companies. Whilst the actual sterling cost is reducing, the time disruption and business interruption is increasing. Notwithstanding that 93% of businesses have installed anti-virus software and nearly 60% keep it updated, half of UK businesses had been infected with a virus in the past year, as a result of the changing nature of the virus attacks , which are increasingly targeting the operating system’s vulnerabilities, where security update patching is weak. Alarmingly new users of remote access, internet email and web access have adopted them without any security controls, with only 50% of wireless networks having any controls and less than 10% have actually tested their disaster recovery plans to see if they work. There is a perception amongst uk businesses that their technical security processes are sufficiently good to detect or prevent all significant security breaches - the perception is not borne out by the facts. too many companies wait until an incident occurs before putting counter measures in place. THE 208 NEWSLETTER - SUMMER 2004
the main recommendations are: • use appropriate expertise to understand the threats and your legal responsibilities • have a clear security policy and ensure clear communication and education of staff • invest in appropriate security controls or insure against them • ensure key security defences are robust and up to date • respond to security incidents efficiently and effectively to minimise business disruption
Health Check If you want an insight into what is needed to achieve information security best practise, then try the DTI’s information security health check [http://www.ukonlineforbusiness.gov.uk/healthcheck/index.j sp] or go to the link on the Chapter web site.
Security Research Initiative Be a ground breaker and become a member of the new Security Research Initiative
‘This Initiative will provide an important benchmark for the industry. The more we know about the marketplace, customer experiences and trends, the better prepared we will be to meet the challenges and take advantage of the opportunities that lie ahead.’ David Dickinson, Chief Executive of the BSIA
Whilst many of us promote the principles of better security, there is currently no hard, independent evidence we can use to support our arguments. This comprehensive, objective data will be invaluable in focusing suppliers and in-house security managers on the approaches needed to maximise customer satisfaction and the effectiveness of crime prevention strategies. Geoff Whitfield, Chairman of The Security Institute
This is your chance to be part of an exciting, new and original research that will examine the state of the security industry at a time when many regulatory changes are about to take place, pressure is building and costs and the threats being faced are continually evolving. This promises to be the most significant research ever undertaken on the security industry. Become a member, promote your company and enjoy a range of commercial benefits. This initiative is supported by the British Security Industry Association (BSIA), The Security Institute (TSI) and ASIS International.
Perpetuity Research & Consultancy International (PRCI) Ltd 6 Salisbury Road g · Leicester · LE1 7QR · United Kingdom www.perpetuitygroup.com Tel: +44 (0)116 252 5728
[email protected] Fax: +44 (0)116 252 2491
7
ASIS A ROADMAP FOR SUCCESS By John H. Hatcher, P.E., C.P.P.
A
lthough the following article was presented to the Texas, USA Chapter some time ago, the views contained in it are still very pertinent today. We are grateful to Chapter 208 member Mark Rowan of HMA Consulting, Inc. for obtaining the author’s permission to reprint the article. We’ve come a long way in the security business, making progress in various aspects of the industry that potential clients should know about. One of the latest advances is the call for Now recognized as an essential element to success for any project, a security risk assessment is completed to ascertain the perceived risks for a facility, how to mitigate the security related vulnerabilities and how to reduce their probabilities of occurrence.
Security Master Plan Simply put, this type of assessment should leave you with a clear definition of what your exposures are, what can be done to reduce their impact on your operations and what your priorities should be for related expenditures. Born out of the initial analysis should be a security master plan. This master plan will serve as your roadmap to follow throughout the implementation process that develops. A master plan should outline the “design intent” which will identify how a facility should be staffed, what technology should be considered, what architectural features should be in place, and what future capabilities need to be considered.
Technological solutions The results of most risk assessments and security evaluations often call for technology based solutions. While the probability and critical impact of many potential loss events may be reduced with architectural or operational changes, technology solutions can be a vital part of that mix. Technologies such as access control, intrusion monitoring, closed circuit television, voice and video recording can all be integral parts of “the whole” solution. Deciding on the right level of technology solutions is critical to the success of a project. How the devices will operate, how they will be maintained, and how they will be monitored are also critical to the success of the installation. Will there be adequate monitoring and recording facilities in place to capitalize on the systems? Is there a good balance of technology and manpower? Are the appropriate response procedures in place for each anticipated event? These questions and more should be answered before any product is ordered.
Second best option Randomly throwing security devices at a problem frequently exacerbates the problem. We, as engineering consultants, want our clients to benefit from the latest technology solutions available in the market place. However, we must be prudent in our recommendations. The continuing evolution of technology provides many new product innovations that can include enhanced features, reduced costs or both. While you might want the latest car model available, you may not want the newest products available. You have probably heard the old adage “we want the second one available”. Most of us want the latest technology, but we want someone else to live through the troublesome period of assisting manufacturers debug their
8
products. It is essential to provide a thorough analysis of a new product offering. Is the new product totally new or an improvement of a current product offering? Does the new product provide significant improvements for your application? Is the new product manufactured by reputable and reliable sources? Can the product be obtained from multiple distribution channels? Has the product been through a thorough alpha and beta testing period in real life applications? Has the product been applied in the same manner as intended for your application? Is the product capable of being integrated into systems offered by various manufacturers? These questions should be answered before going forward down the road to your success.
Selecting an installer Let’s assume that you have a handle on the product offering, now you need to select an integration firm to provide the installation of the systems. Another due diligence should be performed on potential integration firms. How long has the firm been in business locally? Is the firm a factory-authorized representative or have they been trained on the new technology? Who will be my account representative and what is there experience and background? Check the firm’s references for recent work and find out what past client experiences have been.
Bidding Your next stop on the road….bid the work. Any bid package should include clear definitions of what you expect from the integrator. This should include details of the technology solutions and how they will perform, unit pricing or price guarantees, documentation requirements, completion schedules and time frames. It should also detail work periods that you will allow work to take place within your facility and what components, if any, of your existing installation will be allowed to be reused or should be integrated into the final system solution. It is greatly beneficial if you can identify what you are willing to do to assist in the process. Does your company have any internal expertise or resources that may be cost effective to tap into that will save money or time?
Commissioning Once the installations are finalized, a complete and thorough commissioning process should follow. This will ensure that the independent subsystem installations are operating properly and any integration between those subsystems is functioning as intended. This process also provides a benchmarking of the systems installations for ongoing maintenance. The conclusion of this process is to revisit the original design intent documentation and hopefully discover that all of your expectations for the work had been met.
Successful conclusion The above process should apply in some form or another for almost any application. Following this roadmap should provide you with a clear definition of what you need and why you need it, how the solutions are to be implemented, what your expectations are from outside sources. Unwanted surprises should be eliminated and you should have a successful conclusion to your project. HMA Consulting, Inc. is a specialist consulting engineering firm that was formed specifically to address the needs of the buildings of the future with no bias toward any particular product or contractor. There is a website at www.hmaconsulting.com and Mark Rowan may be contacted on 020 7418 2993.
THE 208 NEWSLETTER - SUMMER 2004
Chapter Summer Seminar, 3rd June 2004 Media Committee member Mike Hurst reports on the event
M
embers of ASIS Chapter 208 were guests of Royal and Sun Alliance for this year’s Summer Seminar and thanks go to them and our host for the day, Matt Walker. The excellent venue, organisation and catering made the trip to Horsham well worthwhile. The Seminar was organised by Wilf Knight, husband of our Chairman, Patricia Knight, who gave the introductory presentation. The main theme was the Procurement of Security Systems and the day’s first speaker was Sharon Williams, Security Manager of The American School in London. Sharon has held this position since before 9/11 and as you can imagine, the role has change considerably. Sharon gave us the benefit of her experience in procuring security systems and outlined the method she uses to ensure that systems/services bought, meet the needs of the end-user. The presentation of Mike Williams, Managing Director of systems integrator CDC Limited, was titled Intelligent Buildings, and shone some light on the benefits (and significant cost savings) to be gained in the integration of the various systems that are routinely installed in the modern building. One of the analogies he used was that of buying a £100 video recorder with fifty functions, when what most people need is a tenfunction version costing £30. Head of Special Audit Group for the Diamond Trading Company (De Beers) is Tony Black. A handful of goods from his Hatton Garden vault could keep someone in luxury for a lifetime: unfortunately there were no free samples. Dealing with so many small, high value items is difficult and the many of the problems faced are unique. Tony relies on a mixture of technology and good practice to safeguard diamonds whose number and value is mind-boggling. The overall message from the speakers was: 1. You must know exactly what you need to achieve from procuring a security system. 2. Ensure that the supplier is offering you the solution you need, and not just selling you the product that earns them the biggest commission. 3. Get written guarantees from the supplier in case of problems. The final speaker was Jeremy Barrett of Polygraph Security Services. He illustrated the benefits of “Lie Detectors” with some amusing and interesting examples of cases he has been involved with: but was he telling the truth (joke)? Rounding off the afternoon was our seminar sponsor, Steve O’Neil of Momentum Security, part of the Security Watchdog: thanks go to them. We also appreciate greatly the involvement of seminar exhibitors, CEM, Filmtek Limited, PI Vision, ISC Global (UK) Ltd and SDA-Protec.
THE 208 NEWSLETTER - SUMMER 2004
Mike Willliams
Jeremy Barrett
Steve O’Neill
Sharon Williams Tony Black
Networking
Region 25 News Region 25 (UK, Ireland, Benelux, Chapter 44) currently has approximately 980 members. To help manage the region’s activities RVP Peter French, CPP, (UK) has appointed 4 ARVPs - Godfried Hendricks, CPP (Benelux), Philip Merlenberghs (Benelux), Bill Enright CPP (Ireland), and Andrew Buchanan (UK) who, whilst assisting their own country Chapters, are to seek ways of extending country boundaries for the betterment of the security profession and, in particular, ASIS International.” Peter is also pursuing the establishment of a Chapter in France, and to this end he plans to hold an integral dinner in Paris in October to which all interested ASIS members will be welcome. 9
ASIS
! ! ! S P ...OO H
aslemere. When vandals smashed a shop window in the high street the owner asked the police what they were going to do about it. A spokesman said “We’re looking into it”.
A
rkansas. A suspected thief, weighed down with more than 50 pounds of stolen cameras and CDs drowned as he attempted to evade police by swimming across the Arkansas River.
L
ouisiana A man put a $20 bill on the counter of a small town store and asked for change. When the clerk opened the cash drawer, the man pulled a gun then snatched the cash from the till and fled, leaving the $20 bill on the counter. The total amount of cash he got from the drawer - $15.
Advance notice of the Autumn Seminar On the 16th September we will be returning to GlaxosmithKline in Stevenage for our Autumn seminar hosted by Vice-Chairman David Hamilton. GSK Director of Security, Bill Trundley will present the corporate slot. Bill will focus on what he sees as horizon issues, and what is occupying the business mindset of a blue chip organization. Our seminar sponsor is Reliance Security Services. Details from Jude Awdry.
Advance notice of the Chapter AGM The Chapter will be visiting the BBC for the first time on 19 November. ASIS member Eddie Halling is our host and will be presenting the corporate slot. We have enthusiastic support for the seminar with the working title of “Crises & Risk” with hopefully some guest speakers from the Corporation. Our seminar sponsor is Wilson James. Local hotel accommodation will be available. Pre booking enquires as usual to Jude Awdry
Sometimes you need to speak with a global company when recruiting local or international personnel. For IT, Risk and Fraud, Technical Systems, Security, or Health & Safety . . . contract or permanent
Talk to Yasmeen Stratton
020 8626 3100
www.ssr-personnel.com 10
5 Blackhorse Lane, London E17 6DN
THE 208 NEWSLETTER - SUMMER 2004
The 208 Newsletter
FORTHCOMING EVENTS 2 September 2004. Golf Day, East Berkshire Golf Club, Berkshire As in past years, we are hoping that members or their companies will be able to assist with sponsorship or prizes for the event. Please contact Peter French of SSR Personnel if you would like to help:
[email protected] 9 - 11 September 2004. Security Forum 2004 “A community approach to security in the Information Society”, Barcelona, Spain 16 September 2004. Autumn seminar, GSK Stevenage. The programme will focus on Fraud and Terrorist Financing. Bill Trundley, GSK Vice
President, Corporate Security & Investigations, will present the corporate slot, providing a corporate perspective as to what he sees as horizon issues and what is occupying the business mindset of blue chip organisations. Our seminar sponsor is Reliance Security Services.
Hertfordshire. ASIS members will be given member rates.
27-30 September 2004. ASIS 50th annual seminar & exhibit, 2004, Dallas
23 -24 November 2004. TECHSEC (the newly launched event dedicated exclusively to security technology for end users), ExCeL, London. Chapter 208, Professional Development Committee will apply to the Society’s Professional Certification Board asking for the programme to be eligible for CCP /PSP points. For the latest news and
19 October 2004. SITO Conference “Together We Can”, Kassam Stadium, Oxford 4th November 2004. ASC Annual Conference “Can your Business Survive in the Current Climate”, Metropolitan Police Sports Club, Bushey,
Contact: consec@securityconsultan ts.org.uk 19 November 2004. Winter seminar and AGM, BBC White City, London W12
developments visit: www.techsec.co.uk 10th March 2005. Spring Seminar, BAT, Globe House, Temple Place, London WC2 17-20 April 2005. ASIS International fourth European Conference, Security Solutions for the Future, SAS Radisson Hotel, Copenhagen, Denmark. Contact:
[email protected]. 16th June 2005. Summer Seminar, Royal Mail conference centre, London WC1 23 June 2005. ASC Lunch, Royal Air Force Club, London
MEMBER NEWS
NEW MEMBERS The Chapter extends a warm welcome to the following new members:
Stephen Anderson Ian Ayliffe London Community Services Paul Beat Control Risks Group David Beddow Chevron Texaco Gas Project Alan Blackwell Andy Boffin GE Healthcare John Bryan Frontline Security Solutions Nicholas Copcutt Control Risks Group Timothy Crockett AKE LLC Richard Curthoys Peter Goodwin State Street Corporation Paul Henderson Sony Pictures Entertainment Sylvester Iyeh Sly Afro-Carib Foods/Cosmetics David Kirby Canary Wharf Management Ltd Tom LaPage-Norris NATO NAVN Abdulrasheed Lawal Peter Marsland Peter Marsland Associates Christopher Masters Frontline Security Solutions Anthony McClenaghan Conoco Phillips Peter McKelvey Frontline Security Solutions Jonathan Moore ISC Global UK Ltd Benedict Musa Eagle Eye Security & Protection Services Ltd Jonathan Webb ArmorGroup Thomas Williamson IBM UK Ltd
THE 208 NEWSLETTER - SUMMER 2004
PCB Award We are pleased to announce that in recognition for his hard work in promoting the CPP designation within the UK, Chapter committee member Barry Walker, CPP is the recipient of the PCBís Regional Award 2004. The award will be presented at the CPP lunch during the Annual Seminar in Dallas in September.
In Memoriam Sadly we have to report the death of Chapter member Charles Riley, a private consultant from Hereford, who died in Kuwait on 29 March.
Charitable Cause Congratulations also go to Committee member Helene Carlson for taking part in the ‘Race for Life’ Fun Run at Battersea Park in May. Helene raised over £300.00 for Cancer Research.
First PCI in Europe Hearty congratulations to Chapter member Geoff Hughes, PCI for his recent success in the newly introduced exam. So far as we are aware Geoff is the first successful PCI in Europe. Geoff says of the outcome ‘I must confess to a degree of pride (and relief!) at having made the grade. The process, although demanding, was extremely helpful insofar as it brought me up to date on the many differences between systems and practices in the UK and USA’ Geoff would be happy to share his experience with any fellow Chapter members who may be interested in taking up the PCI challenge.
11
There’s no such thing as a typical access control system And Receptors is no typical access control company. Ours is a powerful combination of best of breed technology and best indeed service.
We have a concept of access control that meets the users’ demands for freedom as well as the organisation’s need for frontiers. And we never compromise on quality.
Each system custom designed to the customer’s precise needs
Talk to Receptors today on 01442 260 220
Precise service standards and procedures designed for each
customer’s systems Based on the only proven networked panel technology in
the market Tried and tested in the most demanding environments worldwide
RECEPTORS SECURITY SYSTEMS
Receptors Security Systems (UK) Ltd. • Oakengrove Yard • Gaddesden Estate • Great Gaddesden • Hertfordshire HP2 6EZ telephone: 01442 260 220 • facsimile: 01442 260 044 • email:
[email protected] • www.receptors.co.uk