Security Articles/Blogs From Our Members
We welcome comments to any of our blog entries by any visitor to the website.
Posts in Security & Liability

It is the Security Source Online Blog that distinguishes this website from those that are merely security services directories. SSO provides usable information provided by our Security Professionals.

Security Assessment
The security professionals that oversee SSO, as well as the SSO Members, ensure that blogs will be posted that are reflective of the security information and loss prevention issues of the day. Each posted blog invites discussion. Visitors to Security Source Online will continue to find a wide range on informational articles that address the safety and security of a wide range of topics. Security Source Online will be responsive to the topics of the day and the ever changing risk environment. Contact SSO for discussion topics.
 
Although blog entries are restricted to SSO members. visitors are encouraged to contact us and suggest blog topics for our members. ANY VISITOR MAY RESPOND OR COMMENT ON ANY BLOG ENTRY AND WE ENCOURAGE YOU TO DO SO. You will find that our members accumulatively, have a wide range of diverse expertise and can address almost any topic of interest.
Security Source Online's RSS FeedClick here to subscribe to Security Source Online's RSS Feed.
May 21, 2013

A Resource For Security Management Support Services

Security Source Online

The Security Source Team is Comprised of a Unique Group of Independent Security Organizations Who Individually & Collectively a Diverse Client Base

The diverse security industry continues to evolve and expand worldwide. Methodologies that were appropriate ten years ago are rapidly being upgraded. Whether the goal is to secure an elementary school, a hospital, a shopping center or a large industrial plant, the security program must be multifaceted and adaptive to specific needs. Those that are responsible for securing these facilities are often required to deal with a number differentiated security providers. This reality is also complicated by the requirement of many organizations to trim their security budgets, while at the same time; the demand for effective security is on the rise. In other words, security programs are tasked with having to do more with less.

Fortunately, it is now possible to do more with less because the cost of applying security technology, in many sectors, has gone down, lessening the reliance on manpower. The proper application of technology can in fact become a force multiplier by helping to meet the objective of doing "more with less.” Another emerging strategy is to actively engage employees in specific activities and behaviors in support of a comprehensive security program.

From time to time, most organizations require a qualified security consultant, a security system designer and/or the ability to outsource such services as video analytics and monitoring. Some organizations may require security management expertise to strike the proper balance between the application of security personnel and the application of technology. Your school, hospital or shopping mall may require the expertise to determine the security package that is best meets the needs of your enterprise. Your organization may have employed the services of a contract guard service, but may lack the expertise to manage such this service. You may be considering be considering hiring a guard service or the installation of a new access control system and/or visitor management system, but lack the experience to make the best choice from among a plethora of vendors.

Security Source Online (SSO) is stepping into this void by providing a single resource to a diverse grouping of security professionals and services aimed at facilitating a cost beneficial decision making. Security Source Online is the brain-child of William Nesbitt, CPP, who is a well-seasoned Board Certified Security Professional. In addition to Bill has hand-picked a team of well qualified security professional to provide a wide range of security support services. The organizations that make up the SSO team are capable of providing, both individually and/or collectively, the specific security management support services your organization may require predicated on need. The Security Source Online security professionals need analysis must be industry specific. These means no two security programs are the same. SSO understands the security needs of a hospital are differentiated from the needs of a mall. We understand the security needs of a biotech company differ from the security needs of a supply-chain warehouse. The SSO team stands ready to serve the needs of your organization. Collectively the Security Source Team has over 200 hundred years of diverse collective expertise.

Security Source Online represents the next generation in the effective offering security diverse security management services. The blog portion of this website ensures that Security Source Online is interactive. We will continue to add new members to the SSO team. The goal is to add security professional to this team who are differentiated from existing team members. Our goal is to provide security management support aimed at the creation of security programs that are both effective, and at the same time, cost efficient.

We encourage your inquires either directly to SSO or to our team members. You may contact Bill Nesbitt at 805/ 410-2300 or at bill@securitysourceonline.com.
October 18, 2012

Security Management Support Program

If you believe your organization needs a qualified Security Manager, but your budget cannot support another salary, consider this alternative. Security Management Services International, Inc. (SMSI Inc.) is offering security management support services as an exclusive and unique service primarily to those clients who have availed themselves of a SMSI Inc. Security Assessment. SMSI fully understands that many enterprises cannot cost justify the hiring of a fulltime, qualified, security manager. Nevertheless this fact does not mean that most business enterprises do not need the expertise of a qualified security manager. Most enterprises need security expertise throughout the course of the year, but albeit, not on a daily bases. The validity assumption is supported by our extensive security litigation experience. The potential for liability claims against an organization that does not have security management expertise managing their security programs is greater than those organizations that maintain full time security management presence.

Alternatively, we will also offer this service to clients who have not contracted for a SMSI Security Review and Assessment. For those clients who wish to participate in our Security Management Support Program (SMSP) for at least one year, Security Management Services International, Inc. will perform an initial assessment at a 20% discounted fee.

Effective security programs must have two pervasive missions: the protection of property and the protection of people. The degree that any enterprise has a responsibility to protect property or people from a liability perspective varies from one industry to another. For example, those companies that provide third party warehousing in support of supply chain operations, bare responsibility when product go missing. The same logic applies to freight companies such as rail and trucking operations Businesses the serve the public such as shopping malls, parking structures, hospitals, daycare centers, hotels and schools (public & private) are all expected to maintain dynamic security operations.

Anecdotally, the odds of being sued for an inadequate security program are much higher for schools and those business enterprises such as hospitals, malls and high-rise buildings when there is an absence of in-house security management. However it is understandable that many business enterprises cannot justify the $100k to $200K+ salary that a well-qualified in-house security manger would demand. Our SMSP offers an effective alternative. The SMSI Inc. Security Management Support Program will protect your interests when dealing with those who provide security products and service such as contract security services. Additionally, our SMSP will continually monitor those security vendors by ensuring they live up to their commitments.

Many enterprises may not need a security manager on a daily basis, but a security professional will be needed several times throughout the year. Remember security is a situational discipline, meaning one size does not fit all. Additionally, security is a proactive discipline aimed at deterrence and prevention. This means that security programs are not amenable to universal solutions. Security programs must be promulgated on the basis of need, and that need may not be static. This means that security programs must be nimble by constantly adjusting to emerging changes in the threat environment. It is especially important that security programs achieve a reasonable standard of care for environments such as schools and healthcare facilities because of vulnerability exposure of the clients being served, patients and children. Adverse security events in schools and medical facilities are likely to be played on the six o’clock news nationwide.

SMSI, through its Security Management Support Program (SMSP) program is able to fill this void. This program will be customized to meet the needs of each client we serve. In many cases, a comprehensive security assessment may be required prior to the provision of Security Management Support services. If a security assessment is deemed advisable, SMSI Inc. will perform these services at a preferred rate for those clients who commit to a SMSP Contract.

If your organization presently has and in-house security manager who is light on experience, the SMSP will support that manager until such time he/she can function independently.

Security Management Support Services may include, but are not limited to:

  • Security vendor selection & oversight
  • Security design and project management
  • Security Incident tracking and trend analysis (Remote monitoring & analysis)
  • Professional guidance in the selection and application of security systems
    • Access management systems
    • Video surveillance systems
    • Lighting
    • The application of CPTED (Crime Prevention Through Environmental Design)
      • Lighting
      • Natural barrier usage
      • Signage
      • Landscape application
      • Housekeeping & Maintenance
      • Graffiti eradication programs
  • Visitor control
  • Management of Aggressive Behavior (MOAB®) training.
  • Hiring and background checking protocols
  • Asset protection programs
    • Inventory control audits
  • Student, patient, guest & employee safety programs
  • Crimecast data & reports
    • UCR Reports
  • Staff crime prevention strategies
  • Police liaison services
    • Community relations/crime prevention officer involvement
  • Employment Bullying Mitigation
  • Sexual deviancy awareness
  • Overnight Building security
    • Alarm system design and supervision
    • Security lighting
    • Locking systems
    • Surveillance system
  • Neighborhood Watch
  • Gang sensitivity awareness
    • Graffiti awareness
  • Workplace Drug detection and prevention
  • Staff security awareness training
  • Year round security awareness program
  • In-persons visits to be determined on a need basis by SMSI security professionals
  • Unrestricted Remote Management Support
    • Problem solving
    • Crisis management support
  • Neighborhood outreach
Terms & Conditions
  1. Four visits per year included in annual contract (Extra visits on per diem basis)
  2. Reimbursement for reasonable and documented expenses
  3. Unlimited remote support
  4. Minimum of one year contract
    1. Initial retainer
    2. Monthly billing of balance
    3. Flat rate billing for visits in excess of four

All SMSI Inc. personnel will be Board Certified Protection Professionals and/or will be former law enforcement veterans. These professionals may also be Spanish bilingual. Remember, the cost of reaction is always three to four times the cost of mitigation.

For information, contact Bill Nesbitt, CPP: bill@smsiinc.com or call 805-499-3800.

June 7, 2012

Need For Stab Vests Identified Following Assault On Prison Officer

Prison officers in New Zealand are appalled with their Corrections Department for saying stab vests are available after another prison officer was attacked at Rimutaka Prison last week.Stab Vests  

More than fifty prison officers have now contacted the Corrections Association in New Zealand, demanding stab vests or some sort of body armour, understanding that prisoners are volatile and unpredictable.

"I strongly believe we must understand better, and remind ourselves that we cannot change the aggressive behaviour of some prisoners” Robert Kaiser, CEO of UK based PPSS Group comments.

"There is simply no doubt that a prisoner consuming drugs, illegal substances or self made alcohol can become hostile and violent within a split of a second, regardless of the prison officers excellent communication skill and calm personality”.

"The ideas to create make shift weapons, e.g. sharpened table and bed frame legs, shanks made out of plastic, sharpened wood or pieces of mirror, and the idea of melting razor blades into tooth brushes and turning pens and pencils into weapon have not been developed out of 5 minutes of simple boredom.  These ideas have been developed following hours and hours of malicious thought processes, and even the very best prison officer can one day be on the receiving end of such thought process”.

A recent publication of the American Correctional Officer once claimed that 33.5% of all assaults in prisons and jails are committed by inmates against prison officers.

According to official statistics obtained by the Howard League for Penal Reform show that recorded assault incidents in prison in England and Wales have risen by 61 per cent between 2000 and 2009.

Based on this statistic prison officers at Hindley Young Offenders Institution, the largest child prison in Europe, are particularly affected with assaults on staff up by an astonishing 967 per cent.

We all will remember too well the outrageous attack on prison officers at the Frankland High Security Prison in March 2010, almost costing the lives of two prison officers, and have to accept the fact this is not a country specific problem, but rather a serious occupational hazard across all countries.

Robert Kaiser states: "The fact is that prison officers deal with some of the most dangerous, violent and unpredictable people in our society on a daily basis, and this is why I suggest they have the simple right to demand appropriate protection and the undivided attention and support from those charged with ensuring their welfare and personal safety”.

It is a rather interesting fact that a police officer who deals with dangerous criminal individuals for only a very few minutes every day is by law required to wear protective equipment… but the prison officer charged with supervising the same individual, potentially for a number of years, is not being issued with any type of protective clothing at all.

Robert Kaiser has been part of numerous discussions and consultancy meetings with prison and correctional facilities in several countries and fully understands all concerns: ”In every single of these meetings the ‘non-confrontational design’ question has always been the centre point of these sometimes very passionate discussions”.

"However, I always seem to come back to the same point, explaining that design and manufacturing capabilities have evolved so much over the past years. Concealable, thin and lightweight blunt trauma stab vests, extremely well suited for prison officers, are now available”.

It is without question, that covert stab vests and similar type of PPE (Personal Protective Equipment) will reduce the risk of workplace violence related injuries, and should this fact not be at least be worth starting an open minded discussion on the personal safety of prison officers?

---

PPSS Group is a UK based manufacturer of certified covert bullet proof vests, stab proof vests and the company behind Cut-Tex® PRO.  This groundbreaking fabric is one of the world's strongest cut resistant fabrics and is now being used to manufacture cut resistant clothing for police, military, prisons and private security firms all over the world.

Robert Kaiser, CEO of PPSS Group is globally respected expert in body armour and known for his passion for personal protection and personal safety.  He is frequently invited to speak in front of large audiences about the latest body armour developments within homeland security and domestic frontline services.  He is acting as body armour consultant for a number of organisations, associations, unions and government departments.
March 6, 2012

Attacks At Armored Car Facilities by Jim McGuffey, CPP, PSP, CPI

Attacks at Armored Car Facilities

While armed robberies are not new to the armored car business, attacks on armored car facilities have been far and few in-in-between. However, in the past few years there have been several incidents that made headlines. During July 7 , 2011 an armored car company in South El Mont that services several hundred ATM’s in Los Angeles County was robbed and approximately a million dollars taken when several burglars gained entry through the roof catching the inside management team by surprise.

On August 11, 2011 news papers reported another robbery of a Garda Facility in Santa Rosa. The Warehouse is described as being located in a mostly residential area next to a church. As of this writing, no information is available on the amount of money stolen. Newspapers reported that on August 2, 2010 heavily armed masked men forced their way into ATM Solutions in St. Louis overpowering two guards, taking money from the vault and fleeing; $11 million was reported taken.

In 2009 three men took a blow torch and gained entry through the roof at the Brink's Columbus armored facility stealing nearly $2.8 million in cash and coin. On November 26, 2007 more than $8 million was taken from an Armored Transport (AT) Armored Facility in Liberty, Ohio during a burglary when an AT employee was able to access the vault during non-business hours transferring money to his personal truck.

The last major thefts reported at armored car facilities occurred October 4, 1997 when 8 people reportedly stole $17 million dollars from a Loomis Fargo & Company facility in Charlotte, North Carolina. On September 12, 1997 news papers reported nearly $19 million was stolen from the Dunbar, Los Angeles facility. Prior to these events the last major robbery I recall occurred Jan. 5, 1993 at the Brink’s Rochester terminal which at the time was reported as the nation's fifth-biggest armored-car robbery-$7.4 million. One of the better known international facility robberies occurred on Nov. 26, 1983 when robbers gained entry into the Brink’s – Mat Vaults at Heathrow Airport stealing millions in gold bars.

It is well known among burglars and security professionals that roofs are a preferred entrance since they are often unprotected and out of sight. Although many facilities have upgraded their security equipment and processes more needs to occur as it relates to security risk assessments. Security policies and systems have little value unless monitored for compliance. Customers might want to consider revisiting their due diligence process to better ensure that armored car facilities are meeting basic security practices since they could be impacted by service interruption and possibly loss of funds if the money is not covered by insurance and the carrier is unable to repay. Depending on the amount stolen and subsequent damage to the carrier’s reputation, investors may also be impacted.

Unless armored car facilities maintain on-going security risk assessments, facility robberies and burglaries may become more common. A security risk analysis could have benefited these locations. However, having state of the art secured facilities can also lead to complacency as was the 2010 case of the Paris Art Museum where burglars stole several hundred million dollars in art by gaining access into the facility without notice due to a faulty alarm that had not functioned in several weeks.

Maintaining adequate security is achieved when processes and systems are consistently monitored, managed and revised as necessary to meet changing threats and risk. Throwing money to purchase equipment and systems to fix a problem without first conducting a security risk analysis is not only a waste of capital but it may only create liability. It is the maintenance phase of the security risk analysis that organizations often fall short when they fail to audit, maintain and revise the systems and processes that were installed as security strategies.

Disclaimer: This article is written for general information purposes only and is not intended to be and should not be used as a primary source for making security or financial investment decisions.

ABOUT THE AUTHOR:

Jim McGuffey, M.A., CPP, PSP, PCI Owner of A.C.E. Security Consultants has 35 years of security management experience. Prior to becoming a security consultant Jim served 3 years in the military, 8 years in law enforcement and 26 years in the armored car industry where he held senior positions of Area General Manager, District Manager and Regional Vice President. During his career Jim had responsibility for 70 high risk facilities, a large fleet of trucks and several thousand employees. Jim was awarded numerous national awards for producing leading results in safety, security, customer service, increasing sales and profit which are attested to by references from peers, supervisors and his management team on his Linkedin Profile.

Jim has a B.A. Degree in Criminal Justice, an M.A. Degree in Management and is Board Certified in Security Management and Physical Security by the American Society for Industrial Security, International (A.S.I.S.) where he has been an active member since 1981.

Jim conducts security risk assessments for organizations and also conducts security risk assessment training. He has been retained as an expert witness in cases involving work place violence, death while in police custody, armored truck crashes, and armored car embezzlement cases. Jim is also called upon by financial investors from various parts of the world who invest in armored car companies to seek industry insight. He is active in his community and serves on several boards in leadership roles and also as a volunteer for organizations addressing homelessness, violence against women, drug and alcohol abuse, and prison ministries.

Please contact Jim at jimmcguffey@hargray.com or 215-460-7370 to learn how you can improve safety and security at your business with a security risk analysis or to assist in evaluating security and best practices that should exist at armored car facilities.

Certified Protection ProfessionalCertified Protection Professional (CPP®) - This certification designates individuals who have demonstrated competency in all areas constituting security management.

Physical Security ProfessionalPhysical Security Professional (PSP®) - The PSP® designation is the certification for those whose primary responsibility is to conduct threat surveys, design integrated security systems that include equipment, procedures and people, or install, operate and maintain those systems.

Professional Certified InvestigatorProfessional Certified Investigator (PCI®) - Holders of the PCI® certification have demonstrated education and/or experience in the fields of case management, evidence collection, and case presentation.


March 6, 2012

Security Expert Selection Suggestions by James McGuffey, CPP, PSP, PCI

Conducting a security risk assessment utilizing an experienced security consultant can prove invaluable for your organization. Please review an article titled "Security Risk Assessment” at www.acesecurityconsultants.com for a detailed explanation of the Security Risk Process.

The following suggestions are intended in the selection process of a security expert being sought to evaluate and improve your security program and conduct a security risk assessment of your facility.

  1. Review over-all security experience. How long has the expert worked in security management? Experience is the most important of all qualifications.
  2. Is specific experience required? In my opinion a security consultant who meets the two key requirements (experience and certification) would be qualified to act as a security consultant in the vast majority of security assignments since objectives of security are essentially the same regardless of the organization.
  3. Industry certification. The author recommends at minimum that a security consultant who is claiming broad based credentials possess the designation of Certified Protection Professional (CPP). Many of my peers believe that this certification is the highest designation that can be bestowed upon a security practitioner. It could be compared to the C.P.A. designation for an accountant.
  4. Formal Education. While I believe education is important, I place experience and certification much higher in the selection process. There are many bright and experienced security consultants as well as CEO’s of major corporations who lack a college degree.
  5. General liability insurance. A general liability policy should be in place to protect the consultant and consumer. If the consultant is other than a sole proprietor, some states may require a worker’s compensation policy.
  6. Professional memberships. I recommend membership in the American Society for Industrial Security, International (A.S.I.S.) and the International Association of Professional Security Consultants (IAPSC). Both organizations are prestigious international security organizations which require membership to demonstrate education and experience prior to acceptance and both have elite certification programs to ensure that the security practitioner is qualified in their fields of expertise. These organizations also develop and share best practices.
  7. Publications. While this credential is not crucial in the selection process, publications by the consultant may reflect his or her view points and thought process relative to a particular consulting project.
  8. Customer and peer references. I would ask for references from recent customers to determine if the consultant was indeed able to enhance their existing security program via cost effective strategies.
  9. Profit and Loss experience. While some of my peers may not think this important I consider P&L experience invaluable. Too many times security managers and experts see things from a one-sided perspective and are not able to properly balance risk and profit.
  10. Interpersonal skill. Does the consultant possess the skill level needed to interact with employees and senior management and orchestrate the security risk assessment process?
Disclaimer: This article is written for general information purposes only and is not intended to be, and should not be used as, a primary source for making security decisions.

ABOUT THE AUTHOR:

Jim McGuffey, M.A., CPP, PSP, PCI Owner of A.C.E. Security Consultants has 35 years of security management experience. Prior to becoming a security consultant Jim served 3 years in the military, 8 years in law enforcement and 26 years in the armored car industry where he held senior positions of Area General Manager, District Manager and Regional Vice President. During his career Jim had responsibility for 70 high risk facilities, a large fleet of trucks and several thousand employees. Jim was awarded numerous national awards for producing leading results in safety, security, customer service, increasing sales and profit which are attested to by references from peers, supervisors and his management team on his LinkedIn Profile.

Jim has a B.A. Degree in Criminal Justice, an M.A. Degree in Management and is Board Certified in Security Management and Physical Security by the American Society for Industrial Security, International (A.S.I.S.) where he has been an active member since 1981.

Jim conducts security risk assessments for organizations and also conducts security risk assessment training. He has been retained as an expert witness in cases involving work place violence, death while in police custody, armored truck crashes, and armored car embezzlement cases. Jim is also called upon by financial investors from various parts of the world who invest in armored car companies to seek industry insight. He is active in his community and serves on several boards in leadership roles and also as a volunteer for organizations addressing homelessness, violence against women, drug and alcohol abuse, and prison ministries.

Please contact Jim at jimmcguffey@hargray.com or 215-460-7370 to learn how you can improve safety and security at your business with a security risk analysis or to assist in evaluating security and best practices that should exist at armored car facilities.

Certified Protection ProfessionalCertified Protection Professional (CPP®) - This certification designates individuals who have demonstrated competency in all areas constituting security management.

Physical Security ProfessionalPhysical Security Professional (PSP®) - The PSP® designation is the certification for those whose primary responsibility is to conduct threat surveys, design integrated security systems that include equipment, procedures and people, or install, operate and maintain those systems.

Professional Certified InvestigatorProfessional Certified Investigator (PCI®) - Holders of the PCI® certification have demonstrated education and/or experience in the fields of case management, evidence collection, and case presentation.


March 6, 2012

Insight into the Armored Car Industry by Jim McGuffey, CPP, PSP, PCI

This article is intended as a basic over view of the cash-in-transit industry for customers, investors, security managers and others interested in the products and services provided by the cash-in-transit industry as well as some of the risks and challenges facing the industry.

The cash-in-transit industry which has been known for decades as the armored car business is now often thought of as a cash management business. The exact number of carriers operating in the U.S. constantly changes but it is estimated to be 55 to 65 carriers, with several large carriers dominating the majority of US markets, transporting, storing, processing and managing billions of dollars each year.

The U.S. economy and markets depend on the global distribution and management of these funds. Most carriers in the armored car industry provide a total cash management solution for their customers. Customers consist largely of financial and retail businesses but also include government agencies and any business requiring the protection, storage, distribution and management of valuables.

As recently as 15 years ago, upon entering an armored car facility you would have observed a garage area that consumed a substantial amount of space utilized for parking trucks. The next largest space was administrative and vaulting functions, with the smallest amount of space used for currency and coin processing operations. Space allocation would also vary depending on the climate since more space was allocated in colder climates for inside parking.

Space allocation changed as carriers began to realize the value in managing cash for their customers. Upon entering carrier locations today, while the garage still consumes substantial space, many facilities now support cash management systems and numerous teller stations. A few carriers maintain a large centrally located cash center with their Armored/ATM Branches located in a circular fashion surrounding the main cash center where cash is pick-up and dropped off daily.

When I started my career in the cash-in-transit industry nearly 30 years ago on the armored side of the business, armored car managers were responsible for starting up basic cash processing operations consisting of a single pocket currency counter and a fax machine to receive orders from financial institutions and send daily balance reports. With the evolution of technology and high speed processing equipment, this is no longer the case and managers with banking or other types of money processing backgrounds are often recruited to manage this product line.

Many financial and retail institutions outsource their currency and coin operations to carriers. This is a logical choice since carriers are transporting and storing these funds. Managing currency has grown tremendously with numerous carriers dedicating state-of-the art facilities entirely for currency processing and management of this profitable product line. Even those facilities offering mostly traditional transport services allocate substantially more space for currency and coin services.

The growth in this product line has created a significant ROI, resulting in the traditional armored product line in some cases, being sold as a loss leader to obtain more lucrative cash management business. I do not recommend this practice since the armored businesses still encompass the bulk of carrier revenue and diluting the traditional and larger pieces of the business can result in lack of proper evaluation and pricing risk experienced on the street.

Within a few years, some predict that the cash management product line will surpass the traditional armored businesses. Change and growth in cash management will be mostly driven by retailers seeking a more efficient method to handle cash from both a risk and service prospective.

Industry Products and Services:

Carriers use different terms to describe their products and services. One carrier may refer to the processing of currency as currency processing while another may refer to it as cash management. Transporting valuables in a truck may be referred to as cash-in-transit services, armored services, transport services, or by other descriptive terms.

Transportation or Cash-in-Transit involves picking up and taking valuables to designated points. This basic service still remains the largest revenue producer for most carriers even though cash management is closing the gap. Carriers utilize armored vans or trucks to transport valuables. Some carriers use vans when servicing ATM’s or carrying lighter loads but a van chassis does not support the weight of coin or heavy currency loads. The cardinal rule in the cash-in-transit business is to always get and give a receipt. Most crews consist of two people; however carriers should use three person crews when carrying higher liabilities aboard trucks or servicing locations in higher risk areas.

Cash Management/Currency Processing is the fastest growing and most sought after service provided by carriers. Cash management consists of verifying, reconciling, processing, forecasting, storing, and total management of customer cash and coin in a seamless and transparent manner for the customer.

Carriers experience the largest return on investment from this product for several reasons. Risk issues are better managed since supervisors are able to work closely with their tellers and CCTV systems are engaged in monitoring processes to ensure compliance. Unlike crews working on the trucks who must deal with traffic, accidents, robberies and other variables that substantially impact profits in a negative fashion, processing currency is done in a controlled environment under close supervision.

Coin Processing is out sourced by some carriers to other firms that specialize in processing coin. Coin service consists of storing, processing, packaging, distributing and managing coin contained and shipped in box, bag or other sealed containers.

Laxity and complacency when handing coin has resulted in the theft of substantial funds. In some cases coin is not discovered missing or reported as quickly as currency. As with any loss, the sooner it is reported and the investigation begins, the better the chance for recovery and resolution.

Audits similar to those recommended for currency should also be conducted periodically for coin. A walk through of a carrier’s facility can often reveal a carrier’s attitude regarding coin. If coin is left in areas unprotected by CCTV and other controls, a loss is certain to occur.

CCTV video should be maintained for a minimum of 90 days. Under most contracts, carriers are not responsible for losses reported after a certain period of time. However, customers have requested manifests for items that were delivered by a carrier more than a year earlier. Thanks to enhancements in digital video, storing and retrieving data is much easier today than in past years.

Storage of valuables normally goes hand-in-hand with transportation services. However, some customers store gold, silver, computer disks, nurse and other professional examinations, and other valuables. These valuable are stored for long periods of time without requiring transport services. To properly protect these valuables, a daily audit is required as well as other stringent controls.

Responsibility for vendor management of carriers should be rotated every few years since vendor managers tend to become too close to their carrier contacts which can create credibility issues on both sides. This closeness can also result in a lack of objectivity during a Request for Proposal for services.

The downside of changing vendor managers is that new managers may lack the experience gained by the former manager. However there are more upsides gained by changing managers and newer managers can spend sufficient time with the former manager prior to exchanging roles to gain adequate insight.

ATM Services are often provided in conjunction with traditional cash-in-transit service. Some carriers provide a full ATM service package to include the actual purchase and installation of the ATM, full maintenance service, cash replenishment, cash-processing and total management of all ATM funds. Servicing ATM’s by armored car crew members is extremely dangerous when the ATM units are located in an area exposed to customer traffic or other high risk areas and should be serviced by three person crews.

Electronic Safes are known by various brand names. These safes are primarily used by retail customers experiencing high turn-over and internal theft issues as well as spending significant time at the end of each shift reconciling receipts and cash. Even without theft issues, these safes can substantially reduce management downtime which can be better used by customers for growing and managing the business.

Most carriers partner with different safe manufacturers to offer a wide scope of services using these electronic safes which come in various sizes. The store clerk places bills into a bill validator located on the safe which verifies the bill by denomination. Coin is placed into a separate storage compartment as are checks.

These units provide shift reports and daily audit reports for the cash which can also be reviewed electronically via a web based system by an owner or manager to evaluate funds available, shrinkage issues, and other useful business purposes. These safes also dispense coin and provide some degree of currency counterfeit detection.

Properly managed and used in conjunction with a well managed CCTV system, the use of these safes can substantially reduce internal theft. A few customers reported that currency shrinkage was entirely eliminated. However, as with any security strategy, complacency can occur unless processes and systems are properly managed.

These safes are also used to provide provisional credit which means that customer assets can now earn interest at the time funds are deposited into the safe, depending on banking relationships and regulations.

Stationary Vaults are mostly located inside a mall lacking a bank. These vaults are used by store owners inside the mall. The vault provides customer change orders that are available during normal course of mall hours. Carriers can sell this service to retailers at a substantially less rate since the armored crew makes only one stop at the vault to gather the deposits and replenish expended coin and currency.

Customers benefit with reduced rates in addition to having the ability to withdraw change and make deposit drops without waiting on their carrier to arrive. This service has proven to be more in demand at locations without a nearby bank.

Virtual Vault Service utilizes a web based system. For banking locations with numerous branches, this service can help reduce cross-shipping charges from the Federal Reserve Bank. An example of cross shipping occurs when a bank ships to the Federal Reserve Bank $100,000 in tens while ordering 100,000 in tens at the same time. This web based system provides faster and more accurate processing and reporting and allows customers to review historical data to forecast cash needs which results in better management of funds.

This service also allows customers to capture new business wherever carrier trucks operate. An example of a need for this service is a bank headquartered in California which provides service for a retailer located in multiple states seeks to use a single carrier. Both the retailer and bank want to expand their relationship; however the bank is unable to add locations fast enough or lacks sufficient expansion capital. An agreement is reached with a carrier, usually within the same footprint as the retailer to provide cash management services and a solution for this logistical concern.

Funds are then picked up by the carrier and returned to the carrier’s facility for processing. Data is electronically transmitted to the banking relationship with seamless transparency for the customer.

Bar Encoding:

Substantial investments are required in bar encoding technology to reduce carrier risk and add value for customers. While bar encoding has been utilized by logistical companies for many years, this technology continues to be rolled out by some U.S. carriers. A few regional carriers pioneered this technology several years ahead of larger carriers, realizing the value it added for their customers.

When bar encoding is fully implemented, the system improves accuracy and eliminates hours of hand writing information onto manifests and again rewriting those same items that are returned to the carrier’s branch. The system captures information which is used for billing, saving substantial hours within the billing department while improving accuracy and making information more readily available carriers and customers.

In addition to increasing vault productivity and security enhancements another value added is referred to as proof of delivery (POD). Customers often call their carrier looking for proof of delivery for items. Prior to bar encoding, the carrier had to search through boxes of files looking for a manifest containing a customer’s signature for the item in question. While most requests are resolved by locating the manifest reflecting proof of delivery the search can take time, depending on the number of requests and the length of time that passed since the item was scheduled for delivery.

Carrier Due Diligence:

Regardless of upgrades in systems and technology, the three basic components that have always protected customers and carriers are integrity, financial strength and a solid cargo insurance policy. Reference to these basic protection factors can be found in Security Management Magazine (ASIS Publication) in articles that I wrote in 1993 and 2009.

Conducting due diligence when reviewing carriers financial capabilities and a having a thorough understanding of the carrier’s insurance policy are imperative in the selection process. Insurance must be adequate for size and scope of carrier operation. A carrier must maintain the financial strength to repay a large loss should for whatever reason the cargo policy fail to pay a customer claim.

A thorough due diligence process should apply to all carriers regardless of carrier size or reported financial strength. Customers should verify prompt repayment for loss situations with other customers of like size. Financial strength and a solid insurance policy may mean little to a customer, if the carrier has a history of failing to reimburse for losses. If a loss is clearly the responsibility of the carrier, many carriers will reimburse within 30 days.

In order to reduce insurance costs, carriers self insure for a certain dollar amount. This means that should the loss occur and it is less than the self insured amount, the carrier pays the loss. The same process applies to truck insurance in states where allowed. Carriers are banking on their ability to manage risk and if they are successful in this objective, insurance premiums are reduced substantially.

Training is essential to a carrier’s success. Training should consist of approximately 40 hours of classroom to include firearms, driving and basic security training since many new employees have never driven a large truck or handled a firearm. Carriers should require mandatory completion of classroom training followed by OJT training and on-going certification. Most carriers use training as a selling point to customers. The best way to ascertain that training is occurring is to ask the crews. Due diligence is especially important during economic downturns to ensure that crucial areas such as training are not curtailed.

Training is an important management function. Professional, on-going training programs implemented with qualified and quality instructors can improve employee retention, customer service, risk metrics and bottom-line profits.

When conducting a carrier facility tour, it pays to be observant. Pay attention to the equipment being used. Has the carrier invested in proper equipment to move coin or cash throughout the facility and for storage? Are employees in uniform? Is horseplay occurring? Is there a dual alarm system? Are cameras properly placed? If trucks are remaining in the garage, how do they look?

Some customers entrust substantial funds with carriers and these funds must be adequately protected. A prior check-list should be developed to ensure that contractual requirements are reviewed and are in full compliance.

Managing Risk:

Managing money, trucks and guns is about managing risk. It requires the ability to balance risk with profit. Managers must make safety and security equal to productivity. While some events are difficult to prevent, there are many actions that can be taken to reduce risk.

During my industry tenure I participated in numerous security audits and I strongly endorse unannounced and random security and cash audits. During a cash and coin audit, inventories are counted to make certain that all cash is present. These audits should occur in conjunction with other customers who maintain on site inventories at carrier locations.

This collective effort will help to ensure that an inventory is not moved from one side of the storage room to the other side just prior to an audit occurring. Failing to properly audit funds stored at carrier locations have resulted in very large losses with some of these losses remaining unpaid.

During audits, a review of policies is also conducted to ensure contractual compliance. While many facilities and cash rooms are monitored with new digital CCTV systems, some are not. Should customers request to review video during an investigation or incident, it is important that the system produce a clear viewing of the process involving the items in question. Customers who assume that carriers storing substantial amounts of money have state-of-art security systems in place may be in for a rude awakening if funds are missing.

Facilities should have back-up generators to support operations during power failures. A review of carrier back-up systems is an action that all customers should require as part of their Business Continuity Plan since a simple power outage can adversely impact customers if the carrier is unable to process and distribute cash.

Ascertain the type and condition of the back-up generator in place to ensure that it provides sufficient power to support the size and scope of operation occurring at the facility. I would also ask to review records reflecting the testing of the generator and inquire about back-up systems for computer data. Is computer data backed up nightly and if so where is it stored and what are the protective measures? What is the contingency plan should a major disruptive event occur?

There are many actions both carriers and vendors can take to protect their valuables. One of the most overlooked actions is ensuring the quality of the disposable plastic bags used to store and transport funds. Security was enhanced when the industry switched from cloth bags and lead seals to disposable plastic bags which are referred to as evident tamper resistant bags.

However, there are plastic bags in existence that can be easily compromised without leaving indications of such compromise. One issue occurs when a bag is compromised using cold or heat and then resealed without reflecting a marking such as "VOID” in the area where penetration or attempted penetration occurred. In this case, money is easily removed and the bag resealed without indication compromise.

Another issue occurs when a bag reflects a marking indicating that it has been compromised simply through the normal handling process of the bag without the bag actually being compromised. This is referred to as a false positive reading which leads to complacency by tellers.

There are other concerns such as the quality and thickness of the plastic which cause the bag to burst if the plastic is lacking in quality or thickness. As with any change in security practices, there should be a risk assessment conducted prior to a change. Please refer to my paper, The Security Risk Assessment.

Financial institutions entrust highly confidential information to carriers. This information must be protected and additional protection must be required for lap-tops that can be easily stolen or compromised if left unattended.

Crew Size and Low Wages and Few Benefits:

The last time many front-line crews enjoyed higher wages, better benefits and three person crews were when larger carriers were represented by the Teamsters in the early 80’s. It was in the early 80’s that carriers refused to honor existing contracts with the Teamsters at which time wages and benefits were substantially reduced and with few exceptions three-person crews became a thing of the past.

Pre-employment screening:

Reducing risk is best accomplished by hiring the right person. New candidates should undergo a criminal background check, motor vehicle check, credit check, past employment and other reference checks, drug testing and most of all and in my opinion the most overlooked is a thorough interview conducted by a seasoned interviewer trained to ask follow-up questions when deceptive responses are suspected. All carriers interview but some interviewers lack training. Carriers may elect to use polygraph and other honest tests in states that permit such tests.

This paper is not intended to discuss all areas that need to be reviewed but hopefully it provides insight into the importance of a thorough review process of an industry entrusted with billions of dollars.

Industry Concerns:

The industry requires leadership who understands the importance of balancing risk with profit. Leadership must be confident enough with their organization to sell the business at rates that support wage increases for their front-line people, improvements in technology and upgrades in security systems.

The industry cannot continue to increase responsibility of front-line crews while paying low wages that are nowhere close to being commensurate with level of risk and responsibility experienced daily.

Following large mergers and acquisitions in the 90’s, customers leveraged their size in markets, driving down already low transportation rates to the point that in my opinion will not support quality growth and sustain quality programs needed to manage a high risk business.

Handling cash is very costly, time consuming and presents significant risk for carriers and customers. The objective for carriers and manufacturers of industry equipment is to reduce cash handling and expedite credit for cash in transit so that it becomes a performing asset. The retail environment is the primary target for cash recycling equipment and applications to improve handling efficiencies and reduce risk. Some carriers are testing cash recycling units which are not much larger than an ATM via a pilot program in select retail stores but there are concerns to be worked out in the reconciliation process.

A recent threat to the industry is the attacks on cash-in-transit facilities. There have been 3 in the past year compared to few in previous years which are noted in my paper "Attacks on Armored Car Facilities.”

Carriers implementing technology to improve internal efficiencies and reduce handling fees while providing faster credit to customers will continue to gain an immense competitive advantage. The key to success has and will continue to be the investment in people, technology and equipment while balancing risk with profit.

Disclaimer: This article is written for general information purposes only and is not intended to be and should not be used as a primary source for making security or financial investment decisions.

ABOUT THE AUTHOR:

Jim McGuffey, M.A., CPP, PSP, PCI Owner of A.C.E. Security Consultants has 35 years of security management experience. Prior to becoming a security consultant Jim served 3 years in the military, 8 years in law enforcement and 26 years in the armored car industry where he held senior positions of Area General Manager, District Manager and Regional Vice President. During his career Jim had responsibility for 70 high risk facilities, a large fleet of trucks and several thousand employees. Jim was awarded numerous national awards for producing leading results in safety, security, customer service, increasing sales and profit which are attested to by references from peers, supervisors and his management team on his LinkedIn Profile.

Jim has a B.A. Degree in Criminal Justice, an M.A. Degree in Management and is Board Certified in Security Management and Physical Security by the American Society for Industrial Security, International (A.S.I.S.) where he has been an active member since 1981.

Jim conducts security risk assessments for organizations and also conducts security risk assessment training. He has been retained as an expert witness in cases involving work place violence, death while in police custody, armored truck crashes, and armored car embezzlement cases. Jim is also called upon by financial investors from various parts of the world who invest in armored car companies to seek industry insight. He is active in his community and serves on several boards in leadership roles and also as a volunteer for organizations addressing homelessness, violence against women, drug and alcohol abuse, and prison ministries.

Please contact Jim at jimmcguffey@hargray.com or 215-460-7370 to learn how you can improve safety and security at your business with a security risk analysis or to assist in evaluating security and best practices that should exist at armored car facilities.

Certified Protection ProfessionalCertified Protection Professional (CPP®) - This certification designates individuals who have demonstrated competency in all areas constituting security management.

Physical Security ProfessionalPhysical Security Professional (PSP®) - The PSP® designation is the certification for those whose primary responsibility is to conduct threat surveys, design integrated security systems that include equipment, procedures and people, or install, operate and maintain those systems.

Professional Certified InvestigatorProfessional Certified Investigator (PCI®) - Holders of the PCI® certification have demonstrated education and/or experience in the fields of case management, evidence collection, and case presentation.





March 6, 2012

Training is a Critical Component for Sucess, by Jim McGuffey, CPP

Security GuardCash-in-Transit carriers like many businesses look for ways to improve profits. However, smart carriers don’t shortcut training to increase profit knowing that short-term profit gains mean little if there is a fatal truck crash due to a decision to reduce training for drivers.

Since carrier drivers and guards are largely unsupervised, training is crucial to ensure that front line team members are well versed in policies and procedures and organizational objectives prior to being assigned a route.

Training is an area that is sometimes viewed as expendable when increased profits are demanded or when staffing issues arise due to large pieces of new business starting or when the economy is good and hiring becomes difficult. The downturn of the economy in 2008 had a positive impact on employee retention which normally results in improved training and subsequent benefits of improved safety, security and customer service.

When staffing issues arise, front-line employees are sometimes placed on trucks and given a firearm without training resulting in substantial risks for carriers, customers and employees. Prior to driving an armored truck many newly hired drivers have never driven a truck of any type or fired a firearm.

Suggestions for sound training program:

1) Training must occur immediately after the employee is hired if the employee is being placed on board a truck. There can be no exceptions to this rule. There are situations where it may be necessary for an employee to have a few weeks under their belt to gain a better understanding of the business prior to training, but these exceptions are rare. Even in rare exceptions there must be some sort of basic indoctrination to basic policies, work environment and security and safety procedures. 2) Instructors must be qualified on the topics taught and represent the organization in a positive manner. Selecting the right trainer is crucial to the success of a training program. 3) Training must be documented and signed off by both the employee and the instructor and reviewed and audited by management. 4) A training record should be maintained separately from other documentation placed inside the employee’s personnel jacket. 4) Testing must occur to ensure that the employee has grasped the material covered. 5) Instructors should be rated by the employees being trained and these ratings reviewed by management and the instructor. 6) For certain functions such as driving or firearms training, the instructors must have certification such as Smith System or NRA certification which must be monitored to ensure renewal upon expiration of certification. 7) Documentation is crucial in training. When OSHA conducts a site inspection the inspector will ask to see training documentation. Documented training also helps management when reviewing employee performance to ensure that the employee has received adequate training. 8) Training must be on-going and tracked to make sure that it occurs in a timely fashion. 9) Organizational incidents both positive and negative should be studied and incorporated into future training programs to prevent reoccurrences and improve results.

The author suggests that customers review training programs that carriers often share in the sales process to ensure that these programs are an integral part of their business. One method to determine if training occurs is to ask an employee questions about their training program.

About the Author:

Jim McGuffey, M.A., CPP, PSP, PCI Owner of A.C.E. Security Consultants has 35 years of security management experience. Prior to becoming a security consultant Jim served 3 years in the military, 8 years in law enforcement and 26 years in the armored car industry where he held senior positions of Area General Manager, District Manager and Regional Vice President. During his career Jim had responsibility for 70 high risk facilities, a large fleet of trucks and several thousand employees. Jim was awarded numerous national awards for producing leading results in safety, security, customer service, increasing sales and profit which are attested to by references from peers, supervisors and his management team on his Linkedin Profile.

Jim has a B.A. Degree in Criminal Justice, an M.A. Degree in Management and is Board Certified in Security Management and Physical Security by the American Society for Industrial Security, International (A.S.I.S.) where he has been an active member since 1981.

Jim conducts security risk assessments for organizations and also conducts security risk assessment training. He has been retained as an expert witness in cases involving work place violence, death while in police custody, armored truck crashes, and armored car embezzlement cases. Jim is also called upon by financial investors from various parts of the world who invest in armored car companies to seek industry insight. He is active in his community and serves on several boards in leadership roles and also as a volunteer for organizations addressing homelessness, violence against women, drug and alcohol abuse, and prison ministries.

Please contact Jim at jimmcguffey@hargray.com or 215-460-7370 to learn how you can improve safety and security at your business with a security risk analysis or to assist in evaluating security and best practices that should exist at armored car facilities.

Certified Protection ProfessionalCertified Protection Professional (CPP®) - This certification designates individuals who have demonstrated competency in all areas constituting security management.

Physical Security ProfessionalPhysical Security Professional (PSP®) - The PSP® designation is the certification for those whose primary responsibility is to conduct threat surveys, design integrated security systems that include equipment, procedures and people, or install, operate and maintain those systems.

Professional Certified InvestigatorProfessional Certified Investigator (PCI®) - Holders of the PCI® certification have demonstrated education and/or experience in the fields of case management, evidence collection, and case presentation.
January 31, 2012

PPSS Body Armour’s CEO Being Shot, Successfully Testing New Bullet Proof Vests

PPSS Body Armour's CEO Testing New Bullet Proof Vests"In the world of executive protection it is of great importance to see how quickly you could become fully operational again after being shot from close range”, Robert Kaiser says after personally being shot, testing their new covert bullet proof vests.

A high definition video has now been made available on YouTube, highlighting the CEO of PPSS Body Armour being shot from approx 9 feet or 3 meters. View here

The shot was fired from a Glock 19 handgun, using 9x19mm FMJ 124gr ammunition.

Robert Kaiser is one of the very first men in this industry who has decided to ‘put his money where his mouth is’.

"I have seen many body armour companies making astonishing claims, so I decided to offer real physical evidence using live ammunition” he says.

Robert explained in great depth and personally ensured this video was not produced to create any type of tough guy image, and it should also not be seen a disregard to human life.

Having viewed the video, it is fair to say that all reasonable and necessary precautions have been taken prior to the production.  One of the country’s leading trauma nurse was present, paramedics were on stand by and an IV was prepared in order to infuse essential drugs in case something did go wrong.

PPSS Body Armour have now launched this ultra light and extremely thin NIJ Level IIIA+ bullet proof vest in order to offer executive and diplomatic security professionals the best possible concealable protection.

With a weight of only 1.65kg, a thickness of just 6.5mm and protective area of 0.28sqm, this new outstanding bullet proof vest certainly means business.

Made out of a high performance ballistic material, this new bullet proof vest also offers additional protection from Tokarev Ball 7.62 x 25mm and Makarov 9 x 18mm.

Waterproof and breathable Cordura® 180 and groundbreaking temperature controlling Outlast® space technology make this great body armour an ideal choice especially in hot and humid conditions.

A specially developed 0.85mm trauma liner provides extremely effective blunt trauma protection.

Please contact PPSS Group directly on +44 (0) 845 5193 953 email info@ppss-group.com or visit www.ppss-group.com



PPSS Group is a UK based company, specialised in the design, development and manufacturing of high performance bite and cut resistant clothing and body armour. PPSS Group is also the company behind Cut-Tex® PRO, a groundbreaking and one of the world’s strongest cut, tear and abrasion resistant fabrics, now being used to manufacture cut and bite resistant clothing for police, military, emergency services, prisons, mental health care and private security firms all over the world.

Robert Kaiser, CEO of PPSS Group is a globally respected expert in body armour and known for his passion for personal protection and personal safety.  He is frequently invited to speak in front of large audiences about the latest body armour developments within homeland security and domestic frontline services.  He is acting as a body armour consultant for a number of organisations, associations, unions and government departments.
December 20, 2011

The Role of Security Consultants

The Role of Security Consultants

There are a number of security consultants listed on this Website. Most of the security consultants that are members of Security Source Online are competent, well experienced and maintain a high degree of integrity. They bring a wide range of expertise to the clients they serve whether on the factory floor, a hospital, shopping center or in the courtroom.

The value of Security Consultants is that they are able to bring an objective point of view to the clients they serve. In order for them to bring objectivity to the table, security consultants should be independent professionals without ties to the vendor side of the industry. For those of you outside the security consulting world, you may be surprised to know there is a good deal of friendship and mutual respect among these professionals. You will find that most have several years of multifaceted experience prior to hanging out their shingle. Most security consultants hold the CPP designation, along with other certifications.

What benefits are derived through the use of Security Consultants?

As mentioned, the first benefit is objectivity. Many of the organizations we work with have experienced security professionals running their security programs, yet they avail themselves. One may question why an experienced security manager would go outside and hire a consultant. In almost all cases, the reason given is they are seeking a fresh objective perspective. Because experienced security consultants have worked for a variety of diverse clientele, they have a wide range of experience to call upon. They understand many vertical industries and they understand the need to ensure that each security programs is responsive to the situational environment at hand. This objectivity is also useful in helping clients choosing security vendors. Not all vendors are created equally and some vendors who may be strong in Peoria may not be so strong in Sacramento.

Because of their breadth of experience, security consultants have a good understanding what works and what doesn’t work. Their perspective is also buttressed by the fact they frequently communicate with one-another. This knowledge helps ensure to that scarce resources produce will optimal ROI for the clients they serve. They understand that most security programs most meet the corporate goal of management. Security consultants understand the need to ensure that each security program fits within the framework of the organization as determined by the C-Suite.

Finally, our role as security consultants is a positive one. The best security consultants do not come into an organization with the preconceived notion to find fault and with the intent to rebuild the security program in their own image. Rather our role is to come into an organization to discover what is right and what is working, and then determine how to make it better. This concept is generally referred to as positive consulting as opposed to coming to a project with the predisposition to find fault.

As we said at the onset, there are numerous security consultants here at Security Source Online. Most security consultants are driven, to one degree or another, by a certain sense of altruism. If you doubt this, contact some of the consultants on this website. You will find them forthcoming and willing to have a discussion on a wide range of concerns you may have. You will also find that of you raise an issue outside the realm of their expertise; they will refer you to one or more of their colleagues.

Security consultants provide comprehensive security assessment, provide security management support, develop security system RFPs, provide security designs as well as project management support. Many security consultants are active in the forensic area as court qualified expert witnesses.

I hope this topic evokes some discussion form our members and other interested parties. I hope we can elicit differing points of views from other consultants and well as the pros and cons from those who have used security consultants. All security professionals strive for excellence and forums like this advance that cause.
May 2, 2011

Security Management Alternatives

Security Management AlternativesThere is an evolving trend toward a middle ground between having no Security Manager and employing a fulltime Security Manager/Director. Every business or organization either cannot justify a fulltime security management position or they believe they cannot afford the cost of employing a fully qualified Security Manager. Some companies that use contract security services will pay extra for and onsite security supervisor as part of the total package being provided by the contracting guard company. To the extent this site manager is qualified to take on the role beyond that of supervising contract security officers is questionable and may present a conflict of interest. Yet, in the real world, when one inquiries "who is in charge of security?” the onsite supervisor is often named.
 
Stepping into this void is a number of fully qualified and certified security professionals who assume the role of Security Management Support. These professionals operate under contract to oversee and monitor all aspects of the security operations including oversight of guard force operations, physical security vendors and investigative services. They often write and oversee a wide range of RFPs and participate in the vendor selection process. The expertise provided by these professionals is at least equal to that of a fulltime security manager minus the expense of payroll, taxes and fringe benefits. Every enterprise does not require a fulltime security manager, but most enterprises require some security management expertise.
 
What is your opinion on this matter? Does this approach have merit? What are the pitfalls? What are the advantages? Are you familiar with this alternative approach?
April 29, 2011

Survey Confirms Paramedics Require User Friendly Body Armour

High Vizability Body Armour"Too many paramedics and other frontline professionals are still opposed to wearing stab vests or other forms of body protection, due to simple misperception", says Robert Kaiser, CEO of UK based PPSS Group.

Many internal surveys, conducted by the UK's Ambulance Trusts concluded that stab vests are not wanted by their frontline staff.

Paramedics Body ArmourRobert Kaiser strongly believes this is simply due to 'technical and design misperceptions' of body armour.

"We have conducted a six months survey, questioning a number of paramedics within the UK how they feel about stab vests, and the result is absolutely clear".

"Of course, there will be people doubting the efficiency of our survey. Nevertheless, we strongly believe this survey shows once again, professionals require user friendly protection".

Based on the PPSS survey, 72.8% of those completing the survey stated "stab vests, which offer blunt trauma protection, should be issued to ALL Paramedics".

87.7% also confirmed that "paramedics should be issued with their OWN INDIVIDUAL stab vest".

55.6% mentioned they were not aware of the latest available advances in covert stab vests, e.g. thickness, weight, concealability and wearability.

"Many of these professionals still believe stab vests are 6kg heavy, one inch thick, bulky, uncomfortable, restrictive and confrontational looking. But this is now far away from the truth".

Mr Kaiser is convinced that the majority of violent attacks on emergency services staff in the UK are not edged weapon, knife or needle related. He believes that the majority of assaults are 'blunt trauma related incidents'.

"Based on many years of frontline experience and our extensive research we know that the risk of knife or needle attacks exist, but this risk is nowhere near as high as the risk of being pushed, punched or kicked whilst on duty".

"This is why we have developed concealable, ultra thin and 2.1kg light body armour that protects the wearer from any type of knife and needle, but more importantly also from punches, kicks and any type of blows".

Mr Kaiser explains: "I think it is time to ask paramedics, prison officers and other emergency services personnel the right questions and educate them in a caring and supportive manner."

"Let us show them how much body armour have advanced. We fully understand the operational responsibilities and risks of ambulance personnel and our body armour reflect this understanding".

On Thursday 10th April, PPSS Group delivered a very informative public presentation, demonstrating the astonishing capabilities of their recently developed body armour, stab vests and slash resistant clothing at the London Islington Hilton Hotel. The event was attended by numerous organisations and professionals.

Aiming to clarify the common misperceptions of body armour, Mr Kaiser himself demonstrated the effectiveness and capabilities of the equipment. The two LIVE demonstrations, which saw the audience gasping for air, certainly had a huge impact and impressed all visitors.

Mr Kaiser strongly recommends to all NHS Ambulance Trusts, Healthcare Trusts and any organisations which employ frontline professionals to re-look at the potential requirements for user friendly and lightweight body armour..

Should you have any questions in reference to body armour, stab vests or slash resistant clothing, then please feel free to contact PPSS Group on +44 (0) 845 5193 95 email info@ppss-group.com or visit www.ppss-group.com



PPSS Group is a UK based manufacturer of UK Home Office certified stab vests and the company behind Cut-Tex® PRO. This groundbreaking fabric is the world's strongest cut resistant fabric and is now used to manufacture slash resistant clothing for police, military, emergency services, prisons and private security professionals all over the world.

Robert Kaiser, CEO of PPSS Group is frequently invited to speak in front of large audiences about the latest body armour developments within homeland security and domestic frontline services. He is acting as body armour consultant for a number of organisations, associations and government departments. He is also organiser of the annual LONE WORKER SAFETY Conference & Exhibition, taking place in London in May every year.
April 16, 2011

Detecting Deception During the Employment Interview

 Detecting Deception During the Interview Process

Studies by independent organizations found that 49% of applicants falsify applications and lie during the interview process and approximately 40% of employees steal from their employers. A recognized method to reduce theft is to hire an honest employee. During the hiring process, companies have historically focused on skills, capabilities and personality, leaving honesty to be determined by background checks and drug testing.

Jim McGuffey, CPP and Owner of A.C.E. Security Consultants has interviewed hundreds of applicants for both management and hourly positions. During the interview process Jim obtained serious admissions such as work place theft, significant vehicle accidents, workplace violence, and illegal drug use during work hours and other critical admissions. These admissions were made after applicants had been interviewed and declared candidates for employment by a supervisor, pending background checks and drug testing. Fortunately the author took a few minutes to interview these applicants prior to extending a conditional offer of employment.

Background checks and drug testing are lacking for the following reasons: past employers seldom release negative information for fear of legal action; illegal drugs may go undetected if the candidate stops using drugs, depending upon the type of test run, cocaine may disappear within the system in 48 hours; and criminal checks may not capture all illegal activity.

Jim emphasizes that interviewers must stop taking notes while applicants are responding to their questions in order to observe verbal and non-verbal behavior that may be indicative of deception following response to key questions. He also emphasizes the importance making a decision based upon the entire interview process as there is no single action or lack of action that is indicative of deception. It is possible that a truthful subject may respond in a manner indicative of deception and a deceptive person may appear to be truthful.

There are many myths regarding verbal and non verbal behavior. One of the many misconceptions is that if someone does not look you in the eye when asking or responding to a question, they are lying. Although this action may be indicative of deception depending on the timing which must be compared to a baseline, many liars are aware of this perception and make it a practiced point of looking you in the eye.

The interviewer must learn the importance of listening and observing behavior and refrain from forming an opinion until after all behavior has been evaluated. Detecting deception is not easy but you can improve your chances of success provided you understand the importance of observing and listening and not jumping to conclusions until indicators of deception are compared to a baseline and evaluated in clusters and context of the questions.

Although experts on this subject matter differ as it relates to the significance of various indicators for deception and the ability of someone trained in this subject to detect deception, I think that many would concur that if interviewers would simply stop taking notes when an applicant is responding to their question, they would have a much better chance of spotting signs of stress or actions that could be indicators of deception that require further exploring. You don't need to be what some  refer to as a "wizard" to spot a lie; you simply need to pay close attention to the clues that are often very obvious.

Hiring an honest applicant can save your organization substantial money by improving results in safety, security, productivity, customer service and profit. Please call Jim at 215-460-7370 or contact him at jimmcguffey@verizon.net with additional questions on this important subject matter and other security services at http://www.armoredcarexpert.com 

April 14, 2011

Business to Business Web-Marketing of Security Products & Services

Security Source Online

 
Security Source Members Have Security Solutions
 
The diverse security industry continues to evolve and expand worldwide. Methodologies that were appropriate ten years ago are rapidly being upgraded. Whether the goal is to secure an elementary school, a hospital, a shopping center or a large industrial plant the security program must be multifaceted and adaptive to specific needs. Those that are responsible for securing these facilities are required to deal with a number differentiated security providers.

Some organizations require a consultant, a security system integrator and/or a video surveillance vendor in addition to many other service providers. Finding the proper assemblage of security providers is a daunting task. It is even more difficult if multiple site locations are involved. This task would be infinitely simplified if these customers were able to turn to a single resource that would be capable of meeting their varied needs. SSO provides that resource.

Security Source Online (SSO) is stepping into this void by providing a single source for a diverse grouping of security professionals, products and services. Security Source Online is the brain-child of William Nesbitt, CPP, a well seasoned Board Certified Security Professional. In addition to Bill, the website’s advisory board members are all Certified Protection Professionals. These individuals are profiled on this website.

This website is also unique in that it offers one year memberships to security providers for a single annual fee. A distinctive aspect of SSO is that the website is also a blog where members only can post informative articles. However, any visitor to the website has the ability to make commentary to any posted blog thereby making SSO interactive.

Security Source Online provides those with security needs direct unfettered access to their vendor of choice. Additionally, SSO members are encouraged to form collaborative relationships with fellow members in order to best serve the collective needs of their clients and to provide clients with a single source for a plethora of security products and services. Over time this website will become the gold standard as a reliable resource for security products and services. Interested parties will be able to find everything from access control system providers and manufacturers to forensic security expert witnesses. This website will become a resource for finding security guard companies, system integrators. IT security specialists as well as forensic security experts.

Security Source Online represents the next generation in effective security services marketing while at the same time providing interested parties with ideas and solutions for difficult problems through informational blogs. The blog portion of this website ensures that Security Source Online is interactive.
 
Those who are interested in becoming members will note that annual membership fees are at a low introductory rate for a limited time only.
March 9, 2011

New Cut Protection Common Body Armour Cannot Offer

Cut-Tex® PRO, a recently developed BS EN 388:2003 blade cut resistance level 5 fabric is now being used to create a highly breathable t-shirt that offers unrivalled cut protection in areas ordinary body armour fail to protect.Cut-Tex Pro Body Armour Base Layer

Security professionals, police officers, prison officers and other domestic frontline professionals have suffered from cut wounds under their arms, on their forearms and on the sides of the upper body.  These wounds are usually classed as 'defensive wounds'.

No ordinary body armour used by any of the above sectors offers protection in these areas, as commonly used materials would restrict movement and agility.

Many frontline staff by instinct will lift their arms and hands during a potential hostile situation, in order to protect the face and head.

However, we must acknowledge that this action would expose an extremely vulnerable area under your arms. A cut, injuring the auxiliary artery under your arms, can lead to rapid blood loss and even death.

This new highly breathable t-shirt is made out of Coolmax® and only features the ultra high cut resistant fabric Cut-Tex® PRO on the entire sleeves part and over the 15cm wide vertical stretch on the sides of the upper body.

Attacks on frontline professionals are occurring rather frequently in this country. One unprovoked attack on prison officers at Frankland High Security Prison in Durham, UK, in 2010 left one prison officer severely injured after one of his auxiliary arteries was slashed during the incident. He survived.

Security professionals, police and prison officers have long asked for better knife protection than the protection offered by their existing body armour or stab vests.

Our job is to offer the best possible protection from the most realistic threats. Leaving the area under your arms unprotected is ignoring the potential dangers a knife, bottle or edged weapon attack represents.

This new type of cut resistant t-shirt is extremely lightweight, comfortable and available from size XS – XXXXL. It is available with short or long sleeves.
February 14, 2011

Active Shooter Composite Reference

Active Shooter Composite ReferenceGiven the number of active shooter incidents over the past ten to fifteen years, as well as the upward trending of these incidents, awareness for security professionals is prudent. The N.Y.P.D. study and the Homeland Security document attached hereto provide useful information. If one adheres to the belief that history is prologue, familiarity and preparation for these kinds of incidents seems like a worthy objective. You will also find an active shooter protocol developed by the National Retail Federation.

When these incidents occur, they generally capture several news cycles and have a lasting shelf life. History has shown us the very few institutions are immune from these senseless acts of workplace violence. Active shooter incidents have touched public schools and universities. They have occurred in shopping malls, manufacturing facilities and business offices. They have also occurred in healthcare facilities such as hospitals and extended care facilities. The common denominator is that most incidents have occurred in properties that afford public access.

As I see it, security professionals need to plan for these events on two levels. First, they need to reasonably try to prevent these events from occurring in the first place. Second, if and when an episode does occur, they need to develop reasonable protocols to contain the event while at the same time moving potential victims out of harms way. There are no "one size fits all" remedies.

Part of the planning process needs to include sensitivity to warning signs, if and when they exist. Sometimes warning signs can be a shooting event on the other side of the country. How many times, over the past ten years have we seen two or three of these events occurring in close time proximity to one another?

Hopefully, these three documents will be an adjunct to your planning process.
 
 
 
August 1, 2010

Security Source Online is Open for Business

www.SecuritySourceOline.com (SSO) is open for business. This marketing/informational site is unique because the site is managed and overseen by seasoned security professionals, not marketeers. Security Source Online provides the vehicle for the marketing of a wide range of security services and products on one hand, and on the other hand a source for practical information aimed at the mitigation of security threats. The SSO advisory board consists of security professionals representing the breadth and width of the United States and can be found on the website.

This website is unique because it serves two purposes. First it is a resource for security information. The site contains an ever growing number of blogs that address variety of security subject matter. SSO blogs are responsive to problems and questions posed by those seeking answers to difficult problems. No legitimate security topics are ignored. The site also provides links to a number of current security news stories. All blog postings are screened to ensure they are truly informational as opposed to being thinly veiled advertisements. The best way to advertise is to provide usable information for those looking for answers. We want visitors to the site to return again and again, not only to locate problem solvers and security equipment when needed, but to also find ideas for mitigation security threats.

Second, as mentioned this site is intended to be a resource for those truly need professional security problem solvers. As our membership grows SecuritySourceOnline.com will become the place to go when security expertise is needed. SSO members will consist of security integrators, security consultants, forensic security experts, alarm companies, security equipment providers, contract security providers, fraud investigators and information security experts. As this site grows, you will find security expertise representatives from all over the world. SSO members represent such disciplines as hospitality security, healthcare security, retail security, information security, supply chain security and many other security disciplines.

The Security Source Online Group had been on LinkedIn for only about a year and has more than 1300 members. Within this group there have been numerous and diverse discussions. SSO on LinkedIn is testimony to the wide range on interest in this unique approach. The Security Source Online Group on LinkedIn continues to attract a diversified group of international security expertise, as well as those seeking answers to difficult challenges, and will continue to do so. On LinkedIn about half of the members of Security Source Online Group members are security providers with the other half being security services users. One of the goals of the SSO LinkedIn group is to encourage thoughtful interaction between users and providers with a minimal amount of commercialism. SSO will provide access to regional providers as members with both a national and international presence as well as those providers who serve local markets.

Our security provider members are encouraged to address the issues of the day by posting topical and thoughtful articles on our blog. We want visitors to SSO to consider the site to be a resource of current security management and security program development information. Those seeking security products or services will be afforded direct access to any of our members with no middle-man interference. Any member who does not maintain high ethical standards will be removed from the site immediately.

The site also hosts a Speaker’s Bureau for those members who provide special insights within the ever-changing world of security services and security technology my making educational public presentations. The SSO Speaker’s Bureau consists of individuals who regularly making presentations of ASIS Internationals and other prestigious trade organizations. Those members of the SSO Speaker’s Bureau understand that our role is to inform as opposed to making forty five minute sale pitches.

Finally, the Security Source Online Roundtable is comprised of individuals who hold widely recognized professional certifications in the various security discipline members. A condition of Roundtable membership is a willingness to form strategic partnerships other Security Source Online Members, in order to meet the synergistic needs of clients they serve. These partnerships will afford SSO member clients with a single point of contact as well as the capability to serve many geographic locals in a coordinated and cohesive manner.

Those interested in becoming a member of the Security Source Online family are now able to do so at a very low annual fee. These low introductory sign up fees will be available on a very limited time basis only. Our goal is to provide an international security resource for those individuals and organizations seeking security information and providers of security related services.

April 26, 2010

Security Risk Assessment

By Jim McGuffey, CPP


This paper is a basic overview of the security risk assessment process. It reflects a process that I utilize when requested to assist in the resolution of security incidents or security requests. An example of a security request is the selection of CCTV equipment or an alarm system; a security incident might involve an assault or theft. I have turned down work because a customer felt rushed and wanted me to make recommendations for a security system without first conducting a security risk assessment.

Funds are sometimes spent on unnecessary security equipment or a project that could have been completed with less cost had more research occurred. In other cases spending a little more money on a more comprehensive integrated security system could have eliminated man-hours and reduced labor cost significantly. A good security manager or consultant understands the importance of performing a security risk survey prior to making changes in a security system.

A security program’s objectives are to deter, delay, detect, deny, respond to and, or recover from reasonably foreseeable events. Understanding the security problems that a company is experiencing will help you to meet these objectives. This is done by assessing the kinds of threats that could impact the assets, the probability of these threats becoming loss events and the impact on the assets should the loss event occur.

Once it is determined that a loss will have a negative impact on a company then countermeasures should be discussed, evaluated for cost effectiveness and implemented. Management will determine the level of risk acceptance for their organization. One example of risk acceptance is the fine-counting of funds by banks or other financial institutions responsible for verifying currency. One firm may elect not to fine count $50.00 bills, citing the cost saved by weighing each strap or bundle of currency instead of running each bill through a currency counter. Another firm may decide that this level of risk is only acceptable for $20.00 bills, thus fine counting each $50.00 dollar bill.

Unless management accurately assesses the level of risk that their organization can accept, they may cease to exist. Unfortunately too many companies have become breeding grounds for internal theft by electing to accept employee theft as part of doing business. I review numerous statistics and incidents related to employee theft which continues to be a top threat to organizations. Most studies report that between 40% to 60% of employees steal from their employers in one form or another and approximately 1/3 of all business go out of business as a result of theft.

Unfortunately in today’s world, many companies have either lost their ability or interest to balance risk with profit. They have gambled on shortcuts to reduce expense, hoping to increase profits while placing their employees, their shareholders and the public at substantial risk of injury and or financial ruin.

A security risk assessment indentifies security vulnerabilities and threats and measures the likelihood of threats occurring. It then prioritizes each identified threat and assesses the opportunity for the risk/threat to occur while measuring the impact that each risk/threat has upon the organization’s assets which in the security world is referred to as criticality.

A risk assessment identifies people, things or processes that are necessary to continue the business and determines how much risk is acceptable and what action should be taken to reduce, mitigate, transfer or eliminate the risk.

THE RISK ASSESSMENT PROCESS:

Step One: Conduct a Security Survey.


A security survey is conducted of your facility and property by an experienced security practitioner and with someone who is familiar with your operation and property. A security survey is the basic tool used in a risk assessment. A security survey consists of an on-site examination to determine existing security measures, indentify deficiencies, establish the protection needed and recommend measures, to enhance overall security.

Step Two: Appoint safety and security focus group.


Management appoints a safety and security focus group representing all operational departments and facilities. These participants should be persons who are familiar with day-to-day operations and their facility and grounds. The security consultant will serve as the facilitator meeting with your safety and security focus group to train them in the Vulnerability/Risk Assessment.

Step Three: Identify assets in need of protection.


Assets are people, property, information and reputation of the organization, with people being the most important.

Step Four: Identify risks/threats that could impact the assets identified.


Risk refers to the possibility of experiencing harm or loss from a security incident, a threat or an event. Risks are natural and man-made and can be moral, economic or physical.

A loss event profile identifies individual threats that could become events. This profile involves understanding the conditions, circumstances, objects, activities and relationships that can produce the loss events.

Following are a few questions to consider asking when identifying risks/threats that could happen. What person or position could commit the act? Would more than one person be required? How easy would it be to commit the act? Could identification documents be forged easily if needed for access? Could the identity of the perpetrators be learned if activity succeeded? Would the act generate a record or audit trail which would help in the investigation?

A threat is a person, place, thing or event which poses danger to an asset. Possible risks or threats to consider are: employee theft, external theft, workplace violence, fire, robbery, burglary, identity theft, bomb threat, injury, vandalism, natural disasters, industrial espionage, extortion, slander, payroll, accounts receivables and payables, purchasing and receiving, computer, information theft and cyber terrorism.

Step Five: Determine risk probability and ranking.


Loss event probability evaluates the number of ways in which a loss event can occur. The more ways that a particular loss event can occur the greater the probability that it will occur. Factors that impact the likelihood of a threat occurring are: historical experience, social and physical environment, and criminal state of mind. Historical information is often the most helpful since frequency of occurrence suggests probability of future occurrence.

Qualitative and quantitative approaches are used to gather information with the qualitative approach being the most widely used.

Thequalitative approach evaluates data obtained from police and community interviews, contract and employee interviews, analysis of existing procedural and physical security and process and operational studies. This data is used to assess threats and vulnerabilities and implement countermeasures consisting controls that discover a vulnerability or threat, reduce the likelihood of an incident and or reduce the impact of an incident.

The qualitative approach is often used when statistical information is not readily available and the organization has a more limited budget. These assessments are more descriptive than measurable and only estimated potential loss is used.

The quantitative approach utilizes annualized loss expectancy (ALE) which is a calculation of single loss expectancy (SLE) multiplied by annual rate of occurrence (ARO). The quantitative approach attempts to identify those threats and risks likely to occur and rank them in the order of seriousness to the organization and the likelihood that they will occur. Then based on that ranking, appropriate counter measures can be assigned. Ira Somerson, states in The Art and Science of Risk Assessment that probability can rarely be precise, and in some cases, promote complacency.

Step Six: Determine impact of loss event on the organization in dollars when possible.


Loss event criticality refers to the impact of a loss on people, property, reputation and information. The Loss event criticality rating assigns letter and numerical ratings to each anticipated event or threat. Criticality ratings used by security practitioners may vary. If unable to assign a probability factor you might note that event Y is more apt to occur than event X.

Step Seven: Determine countermeasures:


When all risks have been identified and prioritized, countermeasures are identified to eliminate or reduce the threat and improve vulnerabilities. Vulnerability refers to a weakness within the system or lack of safeguards. Countermeasures consist of loss prevention, loss control and loss indemnification that transfer, mitigate, reduce or eliminate the risk or threat. Countermeasures include: police, procedures, personnel, barriers, equipment, and records such as incident reports, access reports and transaction logs.

Security experts all agree that the human factor poses the greatest single source of risk for any asset. A good security program begins with hiring the right people. A security risk assessment will determine vulnerabilities in your hiring process.

Step Eight: Perform a cost/benefit analysis:


Countermeasures and security programs should not cost more than the benefits received and should relate to the level of risk exposure. Prior to spending capital to implement countermeasures, management must measure the return on the expenditures (ROE) which is done by determining the avoided losses (AL), recoveries made (R), and the cost of the security program or expenditure (CSP). AL+R divided by CSP = ROE.

On February 17, 2010, a pilot flew his small plane into an IRS facility in Austin, Texas. News stations rounded up well credentialed security experts to solicit comments. One expert stated that we need to find a way to have TSA or other guards posted at the 5,000 plus small private air strips across the U.S. It reminded me of similar countermeasures following 911 when well intentioned security experts reacted with a counter measure that called for guards at every location throughout the world without weighing the benefits or costs or liability. In my opinion, the posting of these guards without specific post orders or specialized training only serves to create a false sense of security and expose assets to even more danger.

I am a proponent of acting quickly to avoid future events but we must always remember a cardinal rule in security which calls for cost justification in the selection of countermeasures to ensure that benefits outweigh the cost! In the Feb. 17, 2010 event, adding man-power without evaluating systems and processes would not be prudent.

Step Nine: Risk Management:


Your team will now implement, monitor, revise and improve these countermeasures as needed. Many companies have comprehensive security programs but management fails to continuously track, monitor and revise these programs as needed. I have investigated numerous thefts, injuries, and other security incidents where the facility had properly positioned cameras and a state of the art CCTV system at the time, only to find that the system was not working properly.

Which Businesses Need a Risk Assessment?


Businesses can benefit from a security risk assessment regardless of size. Let’s look at a laundry room located inside an apartment complex located in a tough inner city area. There are inherent risks to this sort of operation such as assaults and vandalism but one risk that may be overlooked is the theft of copper since this metal is now a highly sought after item.

Copper theft at a laundry room may result in flooding to the apartments after the copper piping connected to the washers is cut. Damage from flooding will likely cost more than the actual loss of the copper, not to mention the interruption of service to the tenants. I am aware of such an incident occurring locally just prior to writing this paper. A security risk assessment will not prevent all threats from occurring but it will help to avoid or mitigate many of the threats that you would otherwise not be prepared to handle.

Value added from security risk assessment.


Following are a few reasons for conducting security risk assessments: 1) Risk assessments help to raise security and safety awareness. When employees are involved in the risk assessment process your security program is more apt to succeed when countermeasures are implemented. 2) Risk assessments help to identify risks that could result in injury to employees or customers resulting in 3rd party law suits. Judgments can exceed the amount of coverage provided by insurance and punitive damages may not be covered. 3) Risk assessments can have an immediate impact in reducing expenses and increasing profits. 4) Risk assessments look at the cost effectiveness and efficiency of existing controls. Funds spent on equipment or systems that are not properly utilized or managed are not contributing to the bottom-line. 5) A risk assessment is recommended prior to designing or making major changes in a security program. A security manager might be wasting funds on a new CCTV system as well as placing the organization at legal risk without more thoroughly understanding the risks. 6) The Sarbanes-Oxley Act of 2002 directs management of publicly held companies to prevent and detect fraud within their organizations related to financial reporting. A risk assessment will not only help to meet some of the SOX requirements but it will help to increase morale, customer service, productivity and profits.

Who should conduct a risk assessment?


I recommend that only security practitioners, who are experienced and credentialed, should work with the management team to conduct a security risk assessment.

Evaluating foreseeability.


Historical records are crucial in determining future events. Records maintained by the organization relating to losses and loss events are helpful when assessing future incidents since frequency of occurrence suggests probability of reoccurrence.

Police and other community interviews, employee and contractor interviews, existing physical security and procedures, other facilities and like businesses, standard of care and best practices for similar businesses, police response, access roads, etc. are also considered.

BALANCING PROFITS WITH RISK!


A day does not pass without the news media reporting a serious safety or security resulting from lack of security and safety processes in place. In April 2010 a large coal mining company well known for their focus on profits incurred an explosion that resulted in the death of 25 workers. The media reported that this company had been cited for 600 violations in the past year at the location where the explosion incurred.

Too many companies continue to deliberately place profits ahead of employee and public safety by refusing to balance profit with risk. Only when productivity is made equal to safety and security will an organization be able to protect assets which include people, property, information and reputation. Existing business models of “profit at all cost” must change!

REFERENCE SOURCE: “The Art and Science of Security Risk Assessment” Ira S. Somerson, CPP 2009 ASIS International.

Disclaimer: This paper is based on what the author believes are generally accepted security principles as of the date of its writing, and on data gathered from what are believed to be reliable sources, this article is written for general information purposes only and is not intended to be, and should not be used as, a primary source for making security decisions.

ABOUT THE AUTHOR:


Jim McGuffey, CPP has 38 years of security and safety management experience with responsibility for the protection of approximately 70 high risk facilities in various parts of the U.S during his career. He is now a security consultant and has been retained as an expert witness by defense and plaintiff firms for security and safety incidents. Jim is an expert on premise security and teaches businesses how to conduct security risk assessments to protect people, property, reputation and information.

Jim earned numerous national awards for consistently improving safety, security and profit while working for global leaders in the security/transportation industry where he held the positions Area General Manager, District Manager and Regional Vice President with full P&L responsibility for various profit centers.

Jim earned a B.A. in Criminal Justice from Aurora University and an M.A. in Management from Webster University. Prior to being recruited into the armored car industry, he served 3 years in the military and 8 years in law enforcement. He currently teaches Criminal Justice Courses at a college near his home.

Jim has been an active member of A.S.I.S. since 1981 and is also a member of International Association of Professional Security Consultants (IAPSC). Jim earned the Certified Protection Professional certification which is valid through December 31, 2012. Throughout the world, the Certified Protection Professional (CPP®) designation is acknowledged as the security profession's highest recognition of practitioners. It is evidence that an individual is "Board Certified in Security Management." The CPP® is awarded based upon experience, education, and of an examination that provides an objective measure of an individual's broad-based knowledge and competency in security management. Ongoing professional development is required in order to maintain the credential. The CPP® is administered by ASIS International, the preeminent international organization for security professionals, with more than 35,000 members worldwide.

Please contact Jim at 215-460-7370 or jimmcguffey@verizon.com for any questions regarding the Security Risk Assessment Process or to learn more about our services provided. www.acesecurityconsultants.com

April 26, 2010

Insight into the Armored Car Industry

by Jim McGuffey, CPP


This article is intended as a basic over view of the cash-in-transit industry for customers, investors, security managers and others interested in the products and services provided by the cash-in-transit industry as well as some of the risks and challenges facing the industry.

The cash-in-transit industry which has been known for decades as the armored car business is now often referred to as a cash management business. The exact number of carriers operating in the U.S. constantly changes but it is estimated to be 55 to 65 carriers, with several large carriers dominating the majority of US markets, transporting, storing, processing and managing billions of dollars.

The U.S. economy and markets depend on the global distribution and management of these funds. Most carriers in the armored car industry provide a total cash management solution for their customers. Customers consist largely of financial and retail businesses but also include government agencies and any business requiring the protection, storage, distribution and management of valuables.

As recently as 15 years ago, upon entering an armored car facility you would have observed a garage area that consumed a substantial amount of space utilized for parking trucks. The next largest space utilized was for administrative and vaulting functions, with the smallest amount of space being used for currency and coin processing operations. Space allocation would also vary depending on the climate as more space was allocated in colder climates for inside parking.

Space allocation became better utilized as carriers began to realize the value in managing cash for their customers. Upon entering carrier locations today, you will observe that while the garage still consumes substantial space, many facilities have been renovated or newly constructed to support cash management systems and numerous teller stations. A few carriers maintain a large centrally located cash center with their Armored/ATM Branches located in a somewhat circular fashion surrounding this main cash center where cash is pick-up and dropped off daily.

When I started my career in the cash-in-transit industry nearly 30 years ago on the armored side of the business, armored car managers were responsible for starting basic cash processing operations consisting of a single pocket currency counter and a fax machine used to receive orders from financial institutions and send daily balance reports. With the evolution of technology and high speed processing equipment, this is no longer the case and now managers with banking or other types of money processing backgrounds are often recruited to manage this product line.

Many financial and retail institutions outsource their currency and coin operations to carriers. This is a logical choice since carriers are transporting and storing these funds. Processing and managing currency has grown tremendously with numerous carriers dedicating state-of-the art facilities entirely for currency processing and management of this profitable product line. Even those facilities offering mostly traditional transport services allocate substantially more space for currency and coin services.

The growth in this product line has created a significant ROI, resulting in the traditional armored product line in some cases, being sold as a loss leader to obtain the more lucrative cash management business. I do not recommend this practice since the armored businesses still encompass the bulk of carrier revenue and diluting the traditional and larger pieces of the business can result in lack of proper evaluation of risk issues experienced on the street.

Within a few years, some predict that the cash management product line will surpass the traditional armored businesses. I concur with this assessment but I do not see it happening in the next few years. Change and growth in cash management will be mostly driven by retailers who must find a more efficient method to handle cash from both a risk and service prospective. These two drivers along with improved profits for both customers and carriers when cash handling is expedited, will continue be the main industry focus.

Industry Products and Services:


Carriers use different terms to describe their products and services. One carrier may refer to the processing of currency as currency processing while another may refer to it as cash management. Transporting valuables in a truck may be referred to as cash-in-transit services, armored services, transport services, or by other descriptive terms.

Transportation or Cash-in-Transit involves picking up valuables and taking these valuables to designated points. This basic service still remains the largest revenue producer for most carriers even though cash management is closing the gap. Carriers utilize armored vans or trucks to transport valuables. Some carriers use vans when servicing ATM’s or carrying lighter loads but a van chassis does not support the weight of coin or heavy currency loads. The cardinal rule in the cash-in-transit business is to always get and give a receipt.

Cash Management/Currency Processing is the fastest growing and most sought after service provided by carriers. Cash management consists of verifying, reconciling, processing, forecasting, storing, and total management of customer cash and coin in a seamless and transparent manner for the customer.

Carriers experience the largest return on investment from this product for several reasons. Risk issues are better managed since supervisors are able to work closely with their tellers and CCTV systems are engaged in monitoring processes to ensure compliance. Unlike crews working on the trucks who must deal with traffic, accidents, robberies and other variables that substantially impact profits in a negative fashion, processing currency is done in a controlled environment under close supervision.

Coin Processing is out sourced by some carriers to other firms that specialize in processing coin. Coin service consists of storing, processing, packaging, distributing and managing coin contained and shipped in box, bag or other sealed containers.

This laxity and complacency of handing coin has resulted in the theft of substantial funds. In some cases coin is not discovered missing or reported as quickly as currency. As with any loss, the sooner it is reported and the investigation begins, the better the chance for recovery and resolution.

Audits similar to those recommended for currency should also be conducted periodically for coin. A walk through of a carrier’s facility can often reveal a carrier’s attitude regarding coin. If coin is left in areas unprotected by CCTV and other controls, a loss is certain to occur.

CCTV video should be maintained for a minimum of 90 days. Under most contracts, carriers are not responsible for losses reported after a certain period of time. However, customers have requested manifests for items that were delivered by a carrier more than a year earlier. Thanks to enhancements in digital video, storing and retrieving data is much easier today than in past years.

Storage of valuables normally goes hand-in-hand with transportation services. However, some customers store gold, silver, computer disks, nurse and other professional examinations, and other valuables. These valuable are stored for long periods of time without requiring transport services. To properly protect these valuables, a daily audit is required as well as other stringent controls.

Responsibility for vendor management of carriers should be rotated every few years. In my opinion, vendor managers tend to become too close to their carrier contacts which can create credibility issues on both sides. This closeness can also result in a lack of objectivity during review of a response to a Request for Proposal for services.

The downside of changing vendor managers is that new managers may lack the experience gained by the former manager. However, in my opinion there are more upsides to be gained by changing managers and newer managers can spend sufficient time with the former manager prior to exchanging roles to gain adequate insight.

ATM Services are often provided in conjunction with traditional cash-in-transit service. Some carriers provide a full ATM service package to include the actual purchase and installation of the ATM, full maintenance service, cash replenishment, cash processing and total management of all ATM funds.

Electronic Safes are known by various brand names. These safes are primarily used by retail customers experiencing high turn-over and internal theft issues as well as spending significant time at the end of each shift reconciling receipts and cash. Even without theft issues, these safes can substantially reduce management downtime which can be better used for growing and managing the business.

Most carriers partner with different safe manufacturers to offer a wide scope of services using these electronic safes which come in various sizes. The store clerk places bills into a bill validator located on the safe which verifies the bill by denomination. Coin is placed into a separate storage compartment as are checks.

These units provide shift reports and daily audit reports for the cash which can also be reviewed electronically via a web based system by an owner or manager to evaluate funds available, shrinkage issues, and other useful business purposes. These safes also dispense coin and provide some degree of currency counterfeit detection.

Properly managed and used in conjunction with a well managed CCTV system, the use of these safes can substantially reduce internal theft. A few managers reported that currency shrinkage was entirely eliminated. However, as with any countermeasure, complacency can occur unless processes and systems are properly managed.

These safes are also used to provide provisional credit which means that customer’s assets can now earn interest at the time funds are deposited into the safe, depending on banking relationships and regulations.

Stationary Vaults are mostly located inside a mall that lacks a bank. These vaults are then used by store owners inside the mall. The vault provides customer change orders that are available during normal course of mall hours. Carriers can sell this service to retailers at a substantially less rate since the armored crew makes only one stop at the vault to gather the deposits and replenish expended coin and currency. Customers benefit with reduced rates in addition to having the ability to withdraw change and make deposit drops without waiting on their carrier to arrive. This service has proven to be more in demand at locations without a nearby bank.

Virtual Vault Service utilizes a web based system. For banking locations with numerous branches, this service can help reduce cross-shipping charges from the Federal Reserve Bank. An example of cross shipping occurs when a bank ships to the Federal Reserve Bank $100,000 in tens while ordering 100,000 in tens at the same time. This web based system provides faster and more accurate processing and reporting as well as allowing customers to review historical data to forecast cash needs which results in better management of funds.

This service also allows customers to capture new business wherever carrier trucks operate. An example of a need for this service occurs when a bank headquartered in California which provides service for a retailer located in numerous states, seeks to use a single carrier. Both the retailer and bank want to expand their relationship, however the bank is unable to add locations fast enough or does not have sufficient expansion capital. An agreement is reached with a carrier, usually within the same footprint as the retailer to provide cash management services and a solution for this logistical concern.

Funds are then picked up by the carrier and returned to the carrier’s facility for processing. Data is electronically transmitted to the banking relationship with seamless transparency for the customer.

Bar Encoding:


Substantial investments are required in bar encoding technology to reduce carrier risk and add value for customers. While bar encoding has been utilized by logistical companies for many years, this technology continues to be rolled out by some U.S. carriers. A few regional carriers had pioneered this technology several years ahead of some larger carriers, realizing the value it added for their customers.

When bar encoding is fully implemented, the system improves accuracy and eliminates hours of hand writing information onto manifests and rewriting those same items that are returned to the carrier’s branch. The system captures information which is used for billing, saving substantial hours within the billing department and again improving accuracy while making information more readily available to the carrier and customers.

Bar encoding provides many enhancements for the carrier and customers. In addition to increasing vault productivity and security enhancements another value added is referred to as proof of delivery (POD). Customers often call their carrier looking for proof of delivery for items.

Prior to bar encoding, the carrier had to search through boxes of files looking for a manifest containing a customer’s signature for the item in question. While most requests are resolved by locating the manifest reflecting proof of delivery the search can take time, depending on the number of requests and the length of time that passed since the item was scheduled for delivery.

Carrier Due Diligence:


Regardless of upgrades in systems and technology, the three basic components that have always protected customers and carriers are integrity, financial strength and a solid cargo insurance policy. Reference to these basic protection factors can be found in Security Management Magazine (ASIS Publication) in articles that I wrote in 1993 and 2009.

Conducting due diligence when reviewing carriers financial capabilities and a having a thorough understanding of the carrier’s insurance policy are imperative in the selection process. Insurance must be adequate for the size and scope of the carrier's operation. A carrier must maintain the financial strength to repay a large loss should for whatever reason the cargo policy fail to pay a claim.

A thorough due diligence process should apply to all carriers regardless of carrier size or reported financial strength. Customers should verify prompt repayment for loss situations with other customers of like size. Financial strength and a solid insurance policy may mean little to a customer, if the carrier has a history of failing to reimburse for losses. If a loss is clearly the responsibility of the carrier, most carriers will reimburse within 30 days.

In order to reduce insurance costs, carriers self insure for a certain dollar amount. This means that should the loss occur and it is less than the self insured amount, the carrier pays the loss. The same process applies to truck insurance in states where allowed. Carriers are banking on their ability to manage risk and if they are successful in this objective, their insurance premiums are reduced substantially.

Training is essential to a carrier’s success and it is an area in which most carriers have made considerable strides towards improving. Many carriers require mandatory completion of classroom training followed by OJT training and on-going certification. Most carriers use training as a selling point to customers. The best way to ascertain that training is occurring is to ask the crews. Due diligence is especially important during economic downturns to ensure that crucial areas such as training are not curtailed.

Training is an important management function. Professional, on-going training programs implemented with qualified and quality instructors can improve employee retention, customer service, risk metrics and bottom-line profits.

When conducting a carrier facility tour, it pays to be observant. Pay attention to the equipment being used. Has the carrier invested in proper equipment to move coin or cash throughout the facility and for storage? Are employees in uniform and well groomed? Is horseplay occurring? Is there a dual alarm system? Are cameras properly placed? If trucks are remaining in the garage, how do they look?

Some customers entrust substantial funds with carriers and these funds must be adequately protected. A prior check-list should be developed to ensure that contractual requirements are reviewed and are in full compliance.

Managing Risk:


Managing money, trucks and guns is all about managing risk. It requires the ability to balance risk with profit. Managers must make safety and security equal to productivity. While some events are difficult to prevent, there are many actions that can be taken to reduce risk.

During my industry tenure I participated in numerous security audits and I strongly endorse unannounced and random security and cash audits. During a cash and coin audit, inventories are counted to make certain that all cash is present. These audits should occur in conjunction with other customers who maintain on site inventories at carrier locations.

This collective effort will help to ensure that an inventory is not moved from one side of the storage room to the other side just prior to an audit occurring. Failing to properly audit funds stored at carrier locations have resulted in large losses with some of these losses remaining unpaid.

During audits, a review of policies is also conducted to ensure contractual compliance. While many facilities and cash rooms are monitored with new digital CCTV systems, some are not. Should customers request to review video during an investigation or incident, it is important that the system produce a clear viewing of the process involving the items in question. Customers who assume that carriers storing substantial amounts of money have state-of-art security systems in place may be in for a rude awakening if funds are missing.

Facilities should have back-up generators to support operations during power failures. A review of carrier back-up systems is an action that all customers should require as part of their Business Continuity Plan since a simple power outage can adversely impact customers if the carrier is unable to process and distribute cash.

Ascertain the type and condition of the back-up generator in place to ensure that it provides sufficient power to support the size and scope of operation occurring at the facility. I would also ask to review records reflecting the testing of the generator. I would also inquire about back-up systems for computer data. Is computer data backed up nightly and if so where is it stored and what are the protective measures? What is the contingency plan should a major disruptive event occur?

There are many actions both carriers and vendors can take to protect their valuables. One of the most overlooked actions is ensuring the quality of the disposable plastic bags used to store and transport funds. Not too many years ago, the industry switched from using cloth bags and lead seals to disposable plastic bags which are referred to as evident tamper resistant plastic bags. This was a great improvement, provided quality bags are used.

There are plastic bags in existence that can be easily compromised without leaving indications of such compromise. I knew this was occurring when these bags were first introduced but I was disappointed to learn that these bags are just as easily compromised without leaving a marking when I recently tested several.

One issue occurs when the bag is compromised using cold or heat and then resealed without reflecting a marking such as “VOID” in the area where penetration or attempted penetration occurred. In this case, money is easily removed and the bag resealed without indication of being compromised.

Another issue occurs when a bag reflects a marking indicating that it has been compromised simply through the normal handling process of the bag without the bag actually being compromised. This is referred to as a false positive reading which can lead to complacency by tellers if not corrected.

There are other concerns such as the quality and thickness of the plastic which can cause the bag to burst if the plastic is lacking in quality and thickness. As with any change in security practices, there should be a risk assessment conducted prior to a change. Please refer to my paper on The Security Risk Assessment.

Financial institutions entrust highly confidential information to carriers. This information must be protected and additional protection must be required for lap-tops that can be easily stolen or compromised if left unattended.

This paper is not intended to discuss all areas that need to be reviewed but hopefully it provides insight into the importance of a thorough review process.

Industry Concerns:


The industry requires leadership who understands the importance of balancing risk with profit. Leadership must be confident enough with their organization to sell the business at rates that support wage increases for their front-line people, improvements in technology and upgrades in security systems.

The industry cannot continue to increase responsibility of front-line crews while in many cases paying low wages that are not commensurate with level of risk and responsibility.

Customers have leveraged their size in markets, driving down already low transportation rates to the point that in my opinion will not support quality growth and sustain quality programs needed to manage a high risk business. Should this occur with cash management services, the industry will struggle even more to remain viable.

Handling cash is very costly, time consuming and presents significant risk for carriers and customers. The objective for carriers and manufacturers of industry equipment is to reduce cash handling and expedite credit for cash in transit so that it becomes a performing asset. The retail environment is the primary target for cash recycling equipment and applications to improve handling efficiencies and reduce risk. Some carriers are testing cash recycling units which are not much larger than an ATM via a pilot program in select retail stores but there are still concerns to be worked out in the reconciliation process.

Those carriers implementing technology to improve internal efficiencies and reduce handling fees while providing faster credit to customers will continue to gain an immense competitive advantage. The key to success has and will continue to be the investment in people, technology and equipment while balancing risk with profit.

Disclaimer: This article is written for general information purposes only and is not intended to be and should not be used as a primary source for making security or financial investment decisions.

ABOUT THE AUTHOR:


Jim McGuffey, CPP has 38 years of security and safety management experience with responsibility for the protection of approximately 70 high risk facilities in various parts of the U.S during his career. He is now a security consultant and has been retained as an expert witness by defense and plaintiff firms for security and safety incidents. Jim is an expert on premise security and teaches businesses how to conduct security risk assessments to protect people, property, reputation and information.

Jim earned numerous national awards while working in the cash-in-transit industry for consistently improving safety, security and profit. He held positions of supervisor, branch manager, area general manager, district manager and regional vice president with full P & L responsibility of numerous profit centers over a 26 year span.

Jim earned a B.A. in Criminal Justice from Aurora University and an M.A. in Management from Webster University. He currently teaches Criminal Justice Courses at a college near his home. Jim has been an active member of A.S.I.S. since 1981 and is also a member of the prestigious International Association of Professional Security Consultants, (IAPSC).

pJim earned the Certified Protection Professional certification which is valid through December 31, 2012. Throughout the world, the Certified Protection Professional (CPP®) designation is acknowledged as the security profession's highest recognition of practitioners. It is evidence that an individual is "Board Certified in Security Management." The CPP® is awarded based upon experience, education, and of an examination that provides an objective measure of an individual's broad-based knowledge and competency in security management. Ongoing professional development is required in order to maintain the credential. The CPP® is administered by ASIS International, the preeminent international organization for security professionals, with more than 35,000 members worldwide.
 
Please contact Jim at jimmcguffey@verizon.net or 215-460-7370 to learn more about our services.
January 27, 2010

The Broken Window Theory - CPTED (Crime Prevention through Environmental Design)

SECURITY PROGRAMS SHOULD START WITH THE BASICS & THEN BUILD - What do you think?
Use your imagination and picture two shopping malls across the street from one another, one on the left and one on the right. Or if you prefer, picture two apartment complexes across the street for one another, one on the left and one on the right.
Let’s assume that the property on the left side of the street is not well kept. There are a few broken windows, there is trash blowing about the parking lot some of the exterior lights are burned out. Let’s also assume that the property on the right side of the street is clean, it is well lit and burned out lights and broken windows are immediately repaired. The property is well landscapes and bushes are regularly trimmed.
Which of these properties has higher rates of crime?
If one hospital’s materials management storeroom is disheveled, cartons are half full with contents spilling out while the storeroom of the hospital down the street is orderly with a well run inventory control program, which one is likely to have a serious shrink problem?
Security is not just about guards, CCTV and alarm systems. It is also about behavior modification, security awareness programs and good housekeeping. If a warehouse or property looks unkempt and is poorly maintained, the odds are that crime will increase, both internally and externally. The disheveled storeroom sends the message that: “If you steal something from here it will go undetected.” Good housekeeping as a security device may also be applied to landscaping, lighting and graffiti eradication programs.
At Security Management Services International (SMSI) we often suggest to our clients that these CPTED (Crime Prevention through Environmental Design) principals should be applied early in the security program enhancement process, in part, because many of these remedies do not come with a big price tag. The application of CPTED principals will positively enhance the deterrent impact of more traditional approaches such as surveillance systems, access control systems and uniform security officers. In fact, in the absence of the techniques, the application of more traditional security methodologies will actually be diminished.
William H. Nesbitt, CPP
President
Security Management Services International, Inc.
December 1, 2009

The Security Hospital Assessment – The Employee Perspective

Security Management Services International, Inc. (SMSI) has conducted numerous security assessments and consultations over the last 20+ years. Whether the assessment involves a manufacturing operation, a shopping center or a hospital, there is a period of time, during the initial phase of the consultation that is spent getting the lay of the land. This means trying to understanding the security history of each client, the primary mission of the organization and the ambient crime environment. The consultant also needs to understand the organizational milieu.
 
The early phases of the assessment process requires the consultant to gain an understanding of the risks and threats that separate this client form any other client. It is important to hear from management and supervisory personnel. It is also equally important to hear from rank and file employees. During the initial phases of the assessment, respondent responses are often guarded and sometime agenda driven. However based on these initial inquiries the consultant moves forward in a process to either validate or invalidate the responses to these early inquiries. This process sometimes takes three or four days before the consultant has enough information to make a more in depth investigation in an attempt to uncover unvarnished factual information.
 
About 2 ½ years ago SMSI embarked on a new strategy aimed at reducing this initial this initial acclimation period. SMSI developed a web based Likert style questionnaire. This questionnaire was developed by SMSI with the help of a computer programmer form Madison, Wisconsin, Michelle Curtis. A Likert style questionnaire allows the respondent to react to a series of statements by rating each the response to each statement by agreeing or disagreeing on a scale of one to five. Each respondent is also invited to make any comments they feel are relevant. The questions are hosted on the Security Management Services International Inc. Website (http://www.smsisitesecurityquestionnaire.com). Ms. Curtis designed a report format the rolls up the accumulative responses to each statement separately.
 
Each client is given a unique username and a unique password. The responding parties are assured anonymity. This anonymity seems to reduce respondent inhibition. Typically the client makes an announcement of the impending assessment, usually through thier intranet network. Employee participation is encouraged. The questionnaire announcement usually goes up about one to three weeks of SMSI’s first visit. It is not unusual, in the wake of the initial announcement, that we get more that 100 in the first few hours. 
 
After 2 ½ years of using this instrument, the results have been very gratifying. We have found the rate of employee participation to be very high. Depending on the client, we find that from 40% to 60% of those participating in the process choose to make commentary. Often times the commentary offers more areas of inquiry that fall beyond the original scope of the questionnaire.
 
What are the benefits of this value added service?
 
The benefits are many and they differ slightly with each client. Without question, this questionnaire saves time by facilitating the ability of the consultant to hit the ground running once on-site. The questionnaire affords the opportunity for every employee to participate in the process. Employees know their voice will be heard. We find that employees who have input on the front end are more likely to buy-in on the ensuing solutions and remedies on the backend. Because the respondents are given anonymity, they don’t hold back. Having said that, to be sure some of the responses reflect hyperbole and distortion. However, the consultant is able to verify the veracity of those comments. Moreover, exaggerations may very well be symptomatic of a deeper problem. More importantly, most of our clients love this value added service.
 
A brief explanation of other diagnostic instruments, by way of analogy, may be helpful here. There is and/or used to be a psychological diagnostic tool called the Thematic Apperception Test. This test along with other such tests such as the Rorschach and Holtzman Inkblot Tests are generally referred to as projective tests. In both cases the subject is shown a number of panels and he or she is asked to describe what their perceptions are and sometimes they are encouraged to tell a story about their perceptions. The psychologist is then able to draw inferences from these tests by interpreting the recurring themes that seem to reoccur from one panel to another. The noting of recurring themes within individuals can be applied to a group of individuals. The themes that reoccur within the accumulative responses from one client, as they participate in the questionnaire process must be duly noted as a dominant perception. The use of this questionnaire efficiently facilitates this longitudinal perspective.
 
The data derived from this questionnaire allows us develop solutions that respond to the unique set of needs of each client. It also helps develop solutions that fit within each client’s collective frame of reference. Within the healthcare environment the Joint Commission expects the hospital security program to be a participatory exercise involving all employees. If we expect employees to fully engage in a comprehensive security and loss prevention program, it seems reasonable that their views and perceptions during the assessment process are worthy of consideration.
November 25, 2009

What is the Backbone of a Successful Mall Security Program? - Is Your Security Planning Predicated on Outcome Based Decision Making?

After having reviewed hundreds of security and loss prevention programs, I find a great deal of disparity in the effectiveness of those programs from marginal to excellent. As a security professional, I am often puzzled as to how each security program evolved to the point it is at when I find it. In some cases it is apparent that the evolution has been the result of a logical linear reasoning process. In other cases the process seems less clear and it often appears that the program has been generally derived by reactive and crisis management responses. It is not unusual to find that many of the assumptions on which security programs are premised, are not rooted in reality. When this happens ROI is deminished.
When one begins the process of determining how the security program has evolved to the point that it has, the picture is not always clear. However it can be said that in a majority of the cases, we find that security programs are front-end driven.
What do we mean by “front-end driven?”
Let me give some examples of front-end driven decisions. Consider the use of CCTV. As we undertake the security assessment of a Shopping Mall for example, we note the use of closed circuit television cameras throughout the facility. When we try to determine the decision process behind the placement of each camera, we are told, “we want to watch exterior doors” or we want to watch the loading dock & parking structures” or “we want to watch fire exits.” First, we often find that these CCTV images are not actually being watched by anyone on a live basis. Consider this; Cameras providing surveillance of common areas such as hallways, parking lots and walkways that are not being watched by a security officer may potentially increase liability.
The rhetorical question I would like to pose, for consideration, is prior to deciding where to place a camera, a card reader, a cipher lock, a floodlight or a barrier is: What is the outcome this action is likely to produce? The best way to avoid the pitfalls of the “law of unintended consequences” is to consider the outcome you wish produce before you make the decision to go forward. When applying security technology, It is all too easy to get caught up in making decisions regarding the assumed benefits of applying a particular technology or procedure. How often have we all heard the utterance, in the wake of a theft, “we need a camera.” This comment implicitly assumes that a CCTV camera, in of itself, would have prevented the theft. Cameras that are not monitored have diminished deterrent value and may actually encourage theft.
It is important to remember big picture. Security programs are all about behavior modification. The use of security technology and/or the use of security officers are all intended to modify behavior by way of deterrence. Security cameras and card access systems are intended to modify behaviors with ultimate intended result of protecting people and property. The role of security is to anticipate and deter. The success or failure of any security program can be measured, in part, by how well that program changes behaviors. The effectiveness of security devices to positively affect behavior can be greatly enhanced by strong security management, workplace violence prevention programs and robust security awareness programs. Whether considering security technology or security officers, the decision making process should remain constant.
Effective mall security programs must reinforce Security Awareness as a positive value system. This program must foster a partnership between mall employees, security officers, tenant and the local police jurisdiction. These actions will increase the benefits to be derived from the application of security technology several times over.
So next time you have a security problem to solve, ask yourself: What will be the intended outcome of my proposed solution? What are the metrics that will support your decision?
William Nesbitt, CPP is also a member of ICSC.
November 22, 2009

JCAHO: EC.02.01.01 - Does Your Security Program Meet the Spirit of EC Standards?

We all know there is a difference in complying with the “letter of the law” and the “spirit of the law.” The same rule can be applied to Joint Commission Safety & Security Standards. You will notice that the Joint Commission standards define expected outcomes, but they do not specifically explain how to get there, nor should they.
 
A couple of points are worth noting: JCAHO standards implicitly recognize that security is a situational discipline, which means that what works for one hospital may not work for another. Second, JCAHO Standards as applied to the hospital security program establishes the floor, but not the ceiling. This means that one cannot assume that by merely complying with JCAHO Standards one is meeting a “reasonable standard of care.” This assertion is supported by the fact that most hospitals that have been the object of security driven litigation, have complied fully with JCAHO EC Standards on their last survey and have still been held liable.
 
The implicit weight of the JACHO standards is considerable. Consider the weight of this simple statement: An effective security management should include proactive surveys, remediation, and training. The clear message is: “Anticipate and Prevent!” How these standards are applied will vary greatly from one hospital to another. The variance of compliance within these standards between a rural 30 bed hospital in Montana will differ greatly from an urban hospital in Los Angeles. There is certain wisdom in these standards in that they allow for situational variances. Universal remedies do not fit hospital security programs the way universal precautions fit hospital safety programs.
 
Although understandable, there seems to be a disproportionate emphasis on child abduction from the JCAHO point of view. If one considers the National Center for Missing & Exploited Children data, you will find abductions from hospitals are very rare, especially since the advent of electronic tag systems. The problem is, like terrorism, the hospital cannot afford to be wrong, even once. A missing baby will always make the major networks’ six o’clock news. Our litigation experience tells us that when infants are abducted the primary common denominator is staff inattentiveness. In other words, a hospital can be fully compliant with the prescribed EC standards and still be adjudged negligent for a breach in security.
 
JCAHO seems to advocate the best security programs require the full participation of all employees thereby ensuring they are part of the security solution. This is one of the fundamental components of any effective security program under any circumstances. Eliciting rank and file employee input during the assessment process is also vital. Those same employees may be speaking with a JCAHO surveyor. Therefore, to understand their perceptions before the fact is vital. Additionally employees who are consulted during the assessment process are much more likely to buy in on the resulting solutions.
 
Meeting these standards, while at the same time, meeting a reasonable standard of care requires due diligence. The foundational basis of due diligence is a comprehensive and objective security assessment. Before one considers the application of remedies such as visitor control, infant security, emergency department chaos, and criminal acts of violence, risks and threats must be not only identified, but they must be quantified. A proper assessment will also provide the path to cost efficient decision making. The assessment process will help each hospital to define the parameters of an appropriate reasonable standard of care.
November 12, 2009

Tyco’s Security Design & Technology Symposium 2009

Bill Nesbitt, CPP, President of Security Management Services International, Inc. (SMSI) and Ron Lander, CPP, CMAS, Executive Vice President of SMSI, recently attended the Security Design & Technology Symposium in Chandler, Arizona. This Symposium was sponsored by Tyco International Companies: Software House, American Dynamics and KANTECH.
 
In order to better serve the customers of Security Management Services International www.smsiinc.com
Bill and Ron believe that their role, in part, is to keep abreast of the ever expanding use of technology as a tool to mitigate security problems and provide real world solutions for our clients.  Ron Lander stated “We were looking for different integration perspectives, due to our frequent risk assessments that unveil multiple incompatible systems that are in need of integration on a common platform.” Tyco conducted an informative workshop that was not laden with implicit sales pitches, but rather their goal was to inform and to listen to security practitioners and the challenges they are facing where the rubber meets the road.
 
Like any symposium worth attending, at least half of the benefits gained from attending stems from the “networking” with other attendees. Security technology has evolved to the point where one can frequently do more with less, with a little foresight. Security control centers are no longer limited to being housed in the facility they are serving. A single control center can now service several regional, national or global facilities. This means there is a reduced need for designing and constructing multiple control centers. The payroll burden of FTEs for each control center is reduced when there is consolidation. This Symposium gave us an opportunity to see Tyco’s flagship integration model, along with its partners in a smooth operating environment.
 
 
When SMSI conducts a security assessment of a shopping center, a hotel, a manufacturing plant or a hospital, the mere identification of weak spots and outright breaches is useless without the offering of mitigating solutions. Those solutions must involve the participation of key stakeholders, the application of security operatives and the efficient use of technology. Security methodologies, whether through the use of security officers or video surveillance and card access systems, are really all about “behavior modification.” If the application of technology fails to positively affect behavior in a way that reduces risk, there will be little return on investment. Both the sponsors of the Symposium, as well as those in attendance, seemed to understand this reality very well. The meetings and displays were low-key and not marketing-oriented. The sponsors spent a great deal of time soliciting our collective input and the input of other consultants who specify the products, and integrators who deal with their products daily. We were also exposed to real-time case studies of successful integration by the actual practitioners.
 
It was a worthwhile two days for the good of our clients (Security Management Services International) , both present and future. The adage, “less is more,” seems to apply to this symposium. The “less” component was supported by the reality that the Tyco companies were not in a full-blown sales mode. If you are a security provider who is invited to speak to any group. such as an ASIS workshop or seminar, and instead of informing, you spend more time pitching your product or service, the end result will be that you will turn off the audience to the organization you represent. If, on the other hand, your primary goal is to inform and to listen to your potential customers, as the Tyco folks did in Arizona, everyone wins. This symposium succeeded in spending less capital on selling and much more capital on informing.
 
November 12, 2009

Security Source Online: The Website

The Security Source Online (SSO) (www.securitysourceonline.com) blog is about to morph into a unique website. The goal of this website will be to facilitate the ability of this site to meet the mission of becoming an all inclusive Security Source for those seeking answers to security problems and those seeking credible security solutions. Security Source has engaged the services of a web design/SEO company (Magical Productions) to facilitate this transition.
 
SSO will continue to produce security information, news of the day and emerging trends. SSO will also continue to conduct surveys that are of interest to the security industry and to the public at large. As a security professional for the past 30+ years, I continually receive phone queries asking for security advice and questions regarding where to find security resources. These inquiries lead me to believe that there is a need for the establishment of a resource for security information as well as a wide range of security resources.
 
In order to fulfill this need, Security Source Online (SSO) will become a meeting place where those with security needs will be able to find security solutions. Those solutions may come in the form of information gained from the postings of our contributors. However, often the provision of mere information is insufficient. Organizations, corporations and individuals often need the services of security professionals as well as those that provide security products and services.
 
SSO will meet those needs by providing searchable listings of security providers. These listings will soon be available on a subscription basis. It is intended that these listings will be searchable for specific vertical markets, by region and/or by products and services offered. It is intended the SSO will become s resource for security products and service for small and large businesses, security managers and even the general public.
 
Those who list with SSO will be invited to contribute informational articles to the site and to offer commentary on the security news of the day. We also envision that subscribers would be able to publish employment opportunities for a very nominal fee.
 
Security Source Online is unique in that the site is managed by security professionals who understand client needs and the security industry as a whole. SSO will truly become the place where security problems meet security solutions.
July 16, 2009

Good Security is About Behavior Modification

What is the purpose of every security program, security policy, security device and/or security barrier, to name a few? Answer: To alter behavior!
 
B. F. Skinner (March 20, 1904 – August 18, 1990) was an American psychologist, author, inventor, advocate for social reform, and a poet. He was a Psychology Professor at Harvard University from 1958 until his retirement in 1974.He is the father of Behavioral Psychology. He originated the operant conditioning chamber, innovated his own philosophy of science called Radical Behaviorism, and founded his own school of experimental research psychology—the experimental analysis of behavior. He discovered and advanced the rate of response as a dependent variable in psychological research. In a recent survey, Skinner was listed as the most influential psychologist of the 20th century.
 
B.F. Skinner’s view of human behavior represented a significant change to the prevailing wisdom of the day represented by the works and theories of Sigmund Freud. Freud believed that an individual’s behavior was rooted in their past. He saw behavior as predetermined. Freud is best known for his theories of the unconscious mind and the defense mechanism of repression and for creating the clinical practice of psychoanalysis for curing psychopathology through dialogue between a patient and a psychoanalyst. Freud is also renowned for his redefinition of sexual desire as the primary motivational energy of human life, as well as his therapeutic techniques, including the use of free association, his theory of transference in the therapeutic relationship, and the interpretation of dreams as sources of insight into unconscious desires.
 
Both Freud and Skinner did research in the changing of behavior. Freud seemed adopt notion that the behavior of individuals could be modified by punishing negative behavior. Skinner added to this notion when he found that the incremental rewarding of positive behavior could affect long lasting change.
 
All of these concepts are implicit in any security program or in any security design. Managing a security program is like trying to prove a negative by trying to stop something bad from happening, despite the fact you can’t be sure something bad would have happened if you did nothing. Most security programs accomplish their mission through the use of implied (if not real) threats of punishments and rewards. This means that the way a security program is perceived is even more important than how good the security program is in actuality.
 
For example, consider one of the most fundamental security devices, the fence. Does a chain-link fence topped of with three stands of barbed wire protect property because it is an impenetrable barrier or does protect property because it sends a message, “Do not pass”? This analogy could be applied to a security officer, to a CCTV camera, or an alarm. The fence impacts the offender’s perception and that perception alters behavior.
 
If one accepts these theses, security programs must exert more emphasis on affecting the perceptions of all affected parties in order affect behavior. Those affected parties may include employees, customers, visitors and would-be perpetrators. This means security programs must be built from back to front. Rather than determining where the security program should go, the better question revolves around what outcomes should the security program produce. In considering the intended outcomes of security programs, one must determine how the symbolism of various security methodologies will affect behavior. The intended result is prevention and deterrence. If the security program is perceived to be a toothless tiger, deterrence goes out the window.
 
It is also important that the security program convey the perceptions that illegal or dishonest behavior has consequences. Experience shows us that those enterprises that rigorously investigate all internal crime and terminate and/or prosecute the offenders have fewer security incidents, because potential offenders perceive that the tiger has teeth.
 
Let us consider risk/benefit ratios. The Wall Street Journal postulated the “red face test” when deciding how much security do I need. In other words, if you security is beached, will you be red-faced?  Clearly the basis for any security program, whether a home, a nuclear power plant, or a hospital, the question will need to be answered, “How much security do I need to reduce risk to an acceptable level?” Additionally the risk/reward ratio for the perpetrator should also be part of the equation. The goal is to raise the perpetrator’s risk of being apprehended to be greater than the reward he or she would receive if successful.
 
Keeping Freud and Skinner in mind, the behavior modification component is clear. We want to reinforce and reward good behavior and punish bad behavior, or at least present a credible threat of impeding punishment.
 
Let’s consider some practical examples. In some applications employees perceive that the security system is omnipotent and therefore will mitigate all threats, negating the need for their active involvement and vigilance. We occasionally find this perception in hospitals. For example, some mother/baby units that employ the use of electronic tags, CCTV and alarms have experienced breaches because the clinical staff ignored the obvious. In shopping centers customers are comforted by the presence of cameras, but how would they feel if they knew no one was watching the cameras. Conversely, how much deterrence would be achieved by those same cameras if would-be perpetrators knew the cameras were not being monitored?
 
Security personnel can significantly enhance the deterrent value of existing security devices without any increase in cost. By applying behavior modification techniques as an active security strategy, any enterprise can do more with less. Just ask the question before moving forward: What is the desired behavioral outcome we are seeking?
 
If you need specifics, please respond to this blog or go to our LinkedIn site (see below) and join our group Security Source Online. Please vote the poll question on our blog.
 
William H. Nesbitt, CPP
President
Security Management Services International, Inc.
1168 Pan Court
Newbury Park, CA 91320
 
Phone: 805-499-3800
Mobile: 805-410-2300
 
July 6, 2009

Contract Security Guards or Proprietary (In-House) Guards

There are strong opinions on both sides of the question as to which is better, contract security officers or in-house security officers. Most of the time when I am asked the question as to which I would recommend, the questioner usually has a strong opinion, one way or the other. There really is no correct answer to the question. For one thing, all contract and proprietary guard operations are not created equally. In other words there is good and bad on either side of the question.
For example, I have seen a few proprietary guard operations that were so corrupt that they were beyond redemption. The only alternative was to disband the in-house operations and begin searching for an effective guard company to fill the bill. I have also worked with clients who have used the same guard service company for over ten years and there was no good reason to change.
All other things being equal considerations of operating cost, control, liability and consistency are all factors that must be part of the decision equation. If you total up all operational costs and your organization is tied to a rather inflexible budget, contract service may be the way to go. Having said that, going with the lowest bidder is usually a mistake. It is therefore important to develop an RFP that allows for comparing apples with apples. With some companies the value-added services that are part of the bundle, may make the difference. With the wrong company, the initial savings achieved from going with a low-baller can easily be gobbled up when you find yourself named in a lawsuit.
If there is a daily requirement that your organization will need to micromanage the day to day activities of the officers, proprietary may be the way to go. Employee turnover can also be a problem with contract services, especially if your primary decision factor is price. Even moderate turnover can be a problem for some industries, such as hospitals. In hospital security programs site knowledge as well as customs and practices are very important. There are very few black and white security decisions in hospital security.  On a daily basis hospital security officers will be required to make judgment calls several times a day.
On the other hand some security directors prefer their own employees because they want more control. However, one cannot assume you will not have control with contract officers.
The point I’m trying to make is don’t make the wrong decision for the wrong reasons. Don’t allow preconceived notions to influence your tough process. If you decide to come down on the side of contract security officers, than you must choose the right vendor. We suggest that you build a decision making matrix so that you can objectively making comparisons using a reliable set of criteria. Seek input from peers and consultants you trust and respect. One more hint, the quality of the security guard labor force usually goes up during time of high unemployment. Conversely during times of high employment the quality of the labor pool goes south, especial if your organization is paying a low hourly rate. This reality applies to both contract and proprietary security personnel. Geographic wage and salary benchmarking is available.
 
Submitted by:
William H. Nesbitt, CPP
President
Security Management Services International, Inc.
1168 Pan Court
Newbury Park, CA 91320
 
Phone: 805-499-3800
Mobile: 805-410-2300
May 16, 2009

Security Budgets – Doing More With Less

Cutting security budgets does not necessarily mean cutting security programs. Sometimes a tough economy forces all of us to adapt and often do better. Organizations and programs that are able to survive, and maybe even thrive in a recession will likely assume dominance going forward. During economic downturns organizations and institutions are often forced to engage in introspection and self examination. This can be a positive exercise.
Over time, many organizations have become inefficient and bloated and fail to deliver reasonable return on investment (ROI). In a booming economy deficiencies that have built up over time are either not spotted or simply ignored. Yet during an economic backslide the errors of the past are often exacerbated by the act of making arbitrary cuts. Often these cuts are made despite the fact that these reductions may have the net effect of exposing the organization to even greater risks and vulnerabilities, a condition rife for lawsuits. The key then is to make cuts, while at the same time, without diminishing the effectiveness of the security program.
Before going any further the following assumption is critical: Security is a situational discipline. One size does not fit all. The efficacy and adequacy of any security program is determined by a wide range of individuated demographic factors. Unlike other programs, such as safety programs, security programs do not lend themselves to universal solutions.
If it is mandated that your security program must be cut, what would you do?
The first step in the self examination process is to determine where the program is now and how it got there. The only way to make these determinations is to commission a comprehensive security review. The advantages of having an outside consulting firm conduct the security program review are objectivity and comparative experience. Some security managers perceive outside consultants as a threat. The opposite is usually the case. Security Consultants are more likely going to make the on-site security managers more successful and will help them achieve more with less.
Next, it is important the assessment process and the resultant security programs that emerge are metric driven. The security programs must also make objective sense to chief financial officer and any other interested bean counters. This means that conclusions and decisions can no longer be driven by intuitiveness and professional judgment. They must be data driven. If the tracking and analytic systems are not in place, they must be initiated. Tracking and analytic data systems can be acquired from companies such as PPM 2000 (www.ppm2000.com). Systems like these are an important ingredient, moving forward, ensuring the security program remains contemporary.
Once the assessment process is completed, it is important that the consulting firm recommends efficient solutions. In the last fifteen years security technology has advanced to the point of allowing the security professional to do more with less. Without ignoring the principal that security is a situational discipline, within the confines of any security programs there are still substantial opportunities for consolidation and some limited standardization.
Although within some circles “out-sourcing” is a dirty word, it is not an all or none proposition. There are pros and cons to proprietary versus contract security services. Again, even this choice does not need one or the other. It can be a combination of both.
Security Management Services International (www.smsiinc.com) has teamed up with PPM 2000 to offer Security Management Support to existing security programs in an attempt to bring added professionalism and experience (150 years of accumulated diverse security management experience). This service, by monitoring and supporting the existing security program, increases effectiveness without the layering on an additional level of payroll burden.  Remember, security errors, even under the best of intentions, can cost millions.
The critical point is, until you fully understand where you are now, and how you got here, the security program will flounder and may well be doomed to repeat the mistakes of the past going forward. Most security evaluations result in lowered cost in the aggregate. If you are asked to cut your security budget, view this request as an opportunity to get better.
Security Management Services International offers a clear alternative to outsourcing. Under SMSI’s Security Management Support Program the client maintains the existing security managers and supervisors. SMSI simply becomes another member of the team by playing a vital supportive role and brings 150 years of security expertise toward making the security program better and more cost effective without the added payroll burden. The efficiencies gained could easily offset the cost of this service. For more information, email Bill Nesbitt, CPP at: bill@smsiinc.com or call 805-499-3800.
May 12, 2009

WORKPLACE VIOLENCE PREVENTION

Workplace Violence often occurs suddenly and with devastating results. These acts are largely committed against individuals, sometimes randomly as in the Virginia Tech shootings or sometimes they are committed against specific targeted individuals. The individuals who commit these acts may be career criminals, disgruntled employees or may include individuals who are involved in a domestic dispute. Workplace Violence can also result in property crimes, including industrial espionage committed by those who may have a dispute with the targeted enterprise. In some cases, there may be the added intervening variable that these acts of workplace violence are being committed by individuals who are deranged, psychotic and/or chemically impaired.
 
Any enterprise that has not recently conducted a complete security assessment, inclusive of a workplace violence threat assessment, may be exposing themselves, their customers and their employees to avoidable risk. We have all seen how tough economic times correlate with increased acts of violence in the workplace. We are seeing the spillage of domestic disputes moving into the workplace. The risk for violence cuts across all sectors, including both private and public enterprises.
 
Security Management Services International, Inc. (SMSI) cannot guarantee the mitigation of all acts of violence in the workplace. No firm can reasonably make such an assertion. However, SMSI can reasonably reduce the probability of such acts occurring through the application of comprehensive threat assessments and the implementation of prudent mitigation strategies.
 
Critical to reducing the probability of Workplace Violence, is the ability of the enterprise to recognize the potential threat, while that threat is still in the incipient phase. It is also important to remember that acts of workplace violence do not occur in a vacuum. In some cases, factors in the workplace may inadvertently give rise to these acts of violence, thereby requiring security awareness and sensitivity training.
 
Workplace Violence Prevention programs must therefore be multidimensional. These programs require training for managers and supervisors in early recognition capability as well as the skills required to avoid not becoming part of the problem. Workplace violence prevention strategies also require the application of more traditional crime prevention methodologies; the reduction of motive, means and opportunity. This requires that the integrated design of physical security remedies must also consider the impact of access management, CCTV and locking system, along with security officer training on workplace violence threat reduction. Any complete security assessment security assessment should include workplace violence threat assessment.
 
Security Management Services International (SMSI) regularly conducts comprehensive security assessments the address a wide range of security risks including workplace violence. SMSI will recommend mitigation strategies and will offer site specific employee training program aimed at early risk identification and mitigation.
 
Visit www.smsiinc.com or call Security Management Services International, Inc. at 805-499-3800.
May 4, 2009

Security Assessments for Healthcare Facilities

There are no shortcuts for doing an effective security audit of a hospital or for any other healthcare provider such as extended care facilities and behavioral health facilities. Achieving an adequate level of security which ensures sufficient protection of patients, employees and visitors, and at the same time, adequately protects assets is no easy task for a number of reasons. First, most administrations do not want their hospitals to look like military instillations. This means hospitals must maintain the appearance of openness while at the same time filtering out criminality. Second, one size does not fit all. There are no universal solutions for mitigating security threats and risks. Security is a situational discipline which means that the efficacy and adequacy of the security program at your hospital must be predicated on the analysis of the special needs of your hospital. The security needs of a hospital in Lebanon, New Hampshire are different than the needs of a hospital in Lynwood, California for a variety reasons.
 
There are no quick fixes when it comes to doing security assessments, especially hospital security assessments. There are no off-the-shelf inventories or computer based instruments that can answer the entire range of necessary questions. Remember effective security programs are all about behavior modification. This means that the elements of an effective security program are intended to deter criminal behavior. It also stands to reason that if no two hospitals have the same set of unique needs, no two hospitals require the same set of mitigation solutions.
 
The security assessment process is all about assessing the probability of risk and subsequently reducing the probability of those risks coming to fruition. The key then is to determine how much risk is acceptable (with some exceptions) and then determining the level of resources required to bring risk to a tolerable level with one eye on the budgetary rule of diminishing returns.
 
In the previous paragraph, in parentheses, we noted “with some exceptions.” There are always exceptions to the rule. In hospitals the most glaring exception to the risk/prevention ratio is found in the way most all hospitals presently protect infants. Most hospitals allocate significant resources to the protection of infants. However, the risk of an infant being taken from a hospital in any given year, even before the application of tag systems, drills and the application of security procedures and technology, is probably less than 1%. Why than do hospitals devote so many resources to the protection of infants against an insignificant statistical probability that anyone will steal a baby? The answer: The hospital cannot afford to be wrong, even once.
 
Security assessments usually require at least a week of on-site presence. These assessments are best conducted by experienced security professionals who truly understand the uniqueness of the healthcare environment. Security consultants should also be independent and hence should not be tied to the guard industry or to the electronic security industry. Additionally, independent security consultants have the advantage of objectivity as well as the experienced of having worked with a large cross-section of hospitals all over the country. Now, let us briefly discuss the assessment process and goals.
 
An important component of the assessment process is the examination of both factual data as well as the perceptions of employees. When it comes to security programs, perception is often reality. Both the actions and inactions of employees are usually predicated on the inculcated perceptions of the actor. Sometimes good security programs are perceived as being poor. Sometimes poor security programs are perceived as being good. The latter carries much greater liability and is probably the most common.
 
Without getting to the specific details of the Scope of Services contained in the Security Assessment Proposal, a brief discussion of some of the components of the Scope of Services may be useful.
Clearly the security assessment will focus of those areas of special concern such as:
 
§ The emergency department
§ L & D and postpartum
o    LDRP
o    NICU
§ Pediatrics
§ Medical-Surgery units
§ Behavioral Health
§ Business Office
§ Admitting
§ Parking & Grounds
§ Access management
§ HR
o    Background screening
§ Pharmacies
§ Support services
§ Asset protection
§ The issue of Workplace Violence Prevention as applied to all of the above
 
The security assessment will look at each of the aforementioned areas of interest from more than one perspective. Obviously the application of traditional physical security protocols will be reviewed, including:
§ Security guard operations
§ Locking systems and key control
§ Access control and automated lock-down systems
§ Closed Circuit Television application
§ CPTED (Crime Prevention Through Environmental Design)
§ Lighting
§ Use of barriers such as fencing
§ Security and sustainability for critical infrastructure
§ Emergency communication
§ The application of security awareness practices
 
The identification and quantification of risks will be studied using a variety of sources including:
§ Anecdotal employee surveys and interviews
§ Review of site-specific security data
§ UCR crime data
§ Local police data
§ Crimecast demographics
§ Professional judgment
 
On the mitigation side of the equation the security professional must exercise prudence. It makes no sense to commission a security assessment that ends up on a shelf collecting dust. Therefore the security professional must endeavor to produce mitigating solutions that are acceptable to the hospital and will actually be implemented. The delivery of a set of “pie in the sky” solutions will do the hospital no good and could potential cause harm. This is why it is so important for the consultant to take the time to understand the corporate persona and mores of the organization he or she is working along with the community the hospital is serving. Solutions offered must be cost efficient and produce measurable outcomes. The least costly fixes must be developed as a precursor to more costly remedies. More often than not, the outcome of a security assessment will lower total operating costs while reducing liability.
 
An area of opportunity often ignored by many hospital security and loss prevention programs is the whole notion of asset protection. Most hospitals are loaded with thousands of consumable goods that the average person could use around the home such as: linen products, food products and supplies, office supplies such as toner and computer paper, cleaning equipment and supplies, etc. Many hospitals take in cash in departments such as food service, gift shops, clinics and pharmacies, yet they have no discernable cash-handling protocol. The result: a cafeteria employee is able to skim about $175.00 per day, five days per week of undetected tax-free income. A hospital is something like a large department store, except there is no checkout counter.
 
In tough economic times, a stem to stern security assessment makes more (cent$) sense than ever. Security programs that are not comprehensive send the wrong message. It is important that hospital security programs are developed with the same vigor and employee involvement as is being done with safety programs with a fundamental difference. Safety programs more generally lend themselves to universal precautionary behaviors. The characteristics of an effective security program will vary from facility to facility.
 
In closing, there is the perception of some that the role of consultants is to find fault. Some employees perceive consultants as a threat. We at Security Management Services International (SMSI) believe in positive consulting. The role of SMSI is to ascertain what is right and what is working and then help to build on that foundation to make thing better going forward. After all, most security programs have evolved overtime. It is foolhardy to assume that all of this evolution is misguided. In keeping with the assumption that no two security programs are, or should be, identical, SMSI’s mission is to discover the unique set of needs for each client and to help those clients to develop security programs that address those special needs.
 
 
William H. Nesbitt, CPP is a Board Certified Protection Professional certified in Security Management and the President of Security Management Services International, Inc. He has more than 35 years of diverse security management experience. That experience includes his participation in approximately 600 security driven lawsuits as a court certified security expert covering 40 states. He and his team have also conducted numerous hospital security evaluations and needs assessments.
 
Bill is a longstanding member of ASIS International, as well as, IAHSS, ASHRM, and ACHE. He is also a member of the ASHRM Patient Safety Interest Network. For questions please call: 805-499-3800.
April 27, 2009

THE WHARTON EXPERIENCE

William H. Nesbitt, CPP, recently attended the ASIS International Security Executive Program at the Wharton at the University of Pennsylvania. This article briefly explains why he attended this program and some of the benefits that were derived.
I have been a practicing security consultant since 1989. My practice has two primary thrusts, providing security expertise to a wide range of commercial and healthcare clients and the provision of security expertise as a court certified security expert. Prior to these endeavors, I spent a number of years in the contract guard industry as well as in private investigations and the electronic security industry. I became a Board Certified Protection Professional in 1978 by sitting for the very first exam held in Los Angeles. If you do the math, it’s not hard to figure out I am no spring chicken.
I was aware of the partnership ASIS International had with the Wharton School and had contemplated attending this program a year ago. I actually called ASIS Headquarters to get a few names of former attendees. I then contacted a few and the feedback I got was very favorable. Early in the spring of 2008 I again began to reconsider attending the ASIS sponsored Security Executive Program at the Wharton School. Of course by now the economy was heading south. As a security veteran of more than 30 years I first questioned whether I was over the hill for such a program and, given the economic conditions of the day, was this considerable investment prudent? This decision presented a bit of a conundrum; spending thousands of dollars for an educational program when economic times are tough.
Subsequently, I eventually believed that I needed to attend this program, precisely because the economy was going into the tank. At the eleventh hour I decided in the affirmative to register. I attended a one week session in November of 2008 and the second week in February of 2009 and never looked back. This undoubtedly turned out to be one of the best decisions I have ever made. I found this program to be intellectually invigorating and of tremendous pragmatic value. Barely a week goes by that I don’t refer to my Wharton notebooks. Because of this experience I have purchased and read about five books and continue to remain curious.
I would like to take a little time to recount with some specificity the range of practical benefits one may derive from this program. Bear in mind that as a security consultant, I knew that more than ever I would need to bring real value to my clients by not only helping them develop effective security solutions, but by also helping them develop programs that are cost-effective with demonstrable ROI.
There is a double-edged sword phenomenon that has resulted from the economic downturn. The security risks facing organizations are greater than ever, in part as a direct result of the faltering economic conditions. At the same there is an increasing squeeze down on the financial resources needed to support security budgets. In the face of rising threats there is still an inclination by some in management to cut security budgets. We have already seen several acts of violence in the workplace that have, in part, origins contingent on personal economic strife. Clearly security managers must have the required skill-sets necessary to justify their budgets with hard data. They also need to quantify the ROI their budget will actually produce. (Not always an easy task because it is akin to trying to prove a negative.)
A reasonable question therefore is: How can you best articulate, in the language of business the need to invest in proactive security programs? How can you present your strategy so the C-suite will listen and approve your recommendation? How can you manage your own resources to maximize return on investment?
One answer: The Wharton/ASIS Program for Security Executives: Making the Business Case for Security. This program offers core business knowledge from one of the nation’s leading business schools, if not in fact, the leading business school in the nation.
This quotation is worthy of consideration: "Security executives need to become business partners. We sometimes are viewed as the people you call if you have a problem. We need to be seen as partners to make sure we contribute to the business. For example, we are working on issues such as counterfeiting, grey markets, and employment terminations, all of which address key security and business issues. We need to understand the directives and strategic objectives of the corporation and look out for the best interests of the company."
—Steve Chupa, Director of Security, Worldwide Security Group, Johnson & Johnson
 
Tough economic times bring out the best and the worst in leadership. For those leaders and organizations for which a faltering economy brings out the worst, failure will always be lurking around the next corner. For those that preserver by adapting and innovating, success will be achieved and those individuals and organizations will emerge stronger than they were going in. The Wharton Program helps one obtain the tools for the latter.
 
As it turned out, this program was one of most invigorating and informative education programs I have ever attended, and I’ve attended a bunch of seminars over the past 30+ years. I looked forward to heading to the classroom each day. As much as I gained from the Wharton faculty, I also gained immeasurably for the interactions with my peers, both in and outside the classroom. I would like to highlight a few of reasons for this statement.
First, the faculty is second to none. The folks at Wharton are not ivory tower academics steeped in theory. These professors all keep one foot in the academic world and the other foot in the real world in that they all do a substantial amount of outside consulting with Fortune 100 companies down to small local enterprises, and they do so worldwide. They understand the global marketplace the global economy that the marketplace must function within. There are also the benefits derived from interaction with fellow classmates which adds to the richness of this program. Additionally, this program does not allow passive participation. The attendees are exposed to theories and operational concepts and subsequently these theories are immediately put into practice through interactive role-playing.
 
One of the highlights of week one was when all of us were exposed to teaching by analogy. The following example also helps to convey the richness of this program. Prior to making the trip to Wharton, we were all invited to read a book entitled “Killer Angels” a novel recounting the Battle Gettysburg in 1863. We subsequentially learned that the reading of this book was preparatory to spending a full day at the Gettysburg Battle site with a Certified Battle of Gettysburg Historian. One might question the relevance of studying a single civil war battle in detail while attending an executive training program at Wharton. It all became clear when, on a cold blustery November afternoon, under the branches of a large oak tree, the professor queried; “If General Lee was running General Motors today, what would his management style be? How do you think he might resolve the current crises?” Similar question were posed throughout the day requiring each of us to apply our analysis to other Generals and battlefield commanders form both the Union Army and the Confederate Army.
 
The Wharton program for security executives provides the attendee with a set of tools by which to move a security program forward in a manner consistent with the corporate culture of the affected organization. This program also recognizes that no two corporate cultures are alike and that as security professionals, we each would be required to understand the culture and mores of the organization we were dealing with when we returned home. One of universal concepts that came through loud and clear is that corporate decisions, especially those requiring budgetary resources, must be data driven and expressed in quantitative terms. This approach is clearly within the value system of those whose organizations are metric driven. To quote John Percival, a member of the Wharton faculty, “Before you ask the company to spend money, you must know how they keep score.”
 
This program is not only instructive for those seeking to develop utilitarian security plans, but it is also very helpful in providing the tools required to make it happen. The program spends significant time on the ways and means of negotiations and both internal and external marketing strategies in furtherance of an effective security plan.
 
Finally, this program also recognized that all who attend this program are not created equally. As a precursor to both sessions, those of us who signed on to the program where asked to respond to a number of diagnostic inventories. These instruments were scored at the resultant profiles were provided to each attendee. The information provided by these instruments gave each of us greater insight into out strengths, preferences and management styles. The ability to asses a situation or to enter into a negotiation is enhanced if one better understands their own strengths and weaknesses as well as their biases.
 
I’ve attended numerous seminars and workshops over the years. After attending these workshops I come home with notes and handouts. Often these materials are placed on my desk and after a few months they find their way to a bookshelf or file drawer. Every year or so, the file drawers are purged and the materials are eventually discarded and the workshop fades in to a distant memory. This result seems very unlikely with the Wharton Program. The Wharton Program for Security Executives, at least in my case, has stimulated me to learn more. I know that what works today, may not work tomorrow. This means that in order to adapt and change. I must see change coming. Clearly this program has provided the tools to meet these challenges.
 
 

William H. Nesbitt, CPP
President
Security Management Services International
1168 Pan Court
Newbury Park, CA 91320
 
Phone: 805-499-3800
Mobile: 805-410-2300
April 6, 2009

Security Management Support Program

Security Management Services International, Inc & PPM 2000
A Strategic Partnership
 
Security Management Services International, Inc. (www.smsiinc.com) is offering a unique and innovative approach to cost-effective security management. The security challenges facing enterprises in today’s economic environment can be daunting. The nature of these security challenges ranges from the threats posed by a wide range of criminal enterprise on one hand and on the other hand finding the means to address these challenges with limited and scarce resources. Security programs are asked to cut back, even as threats and risks are on the rise. Tough economic times also produce a whole new set of security concerns. This means that Security Programs must be more effective and more sophisticated while at the same time operating on tighter budgets. Security Programs must therefore be specifically targeted to meet the unique needs of the organizations they serve and this mission must accomplished efficiently with cost effectiveness.
 
Meeting these objectives requires experienced security management coupled with the application of the latest security technology. This security technology must be applied appropriately toward the solving of security problems through the effective use of CCTV, access management systems and alarm systems. When required, security vulnerabilities will need to be addressed through the effective use of security personnel, including uniformed officers. In today’s economic environment all of these decisions going forward must be data driven. Security programs that are not driven by metrics will not be effective and they will not stand the test of time.
 
In order to ensure that security programs are predicated on hard data, and that security programs remain dynamic and capable of adjusting to new and ever-changing challenges, Security Management Services International (SMSI) is offering a unique combination of cost effective services to their clients, enabling them to meet the challenges of tomorrow with cost-efficiency.
 
In order to deliver these security management services, SMSI has formed a Strategic Partnership with PPM2000 (www.ppm2000.com), the world leader in the development of Security Management Software. Through the useof PPM 2000’s Perspective Premium Incident Management Package, SMSI will beable to monitor their clients’ security events. This will allow SMSI to spot trends early-on and make the necessary adjustments aimed at extinguishing sparks well before they become fires.
 
The SMSI Security Management Support Program (SMS) is intended to support existing security programs by providing less experienced in-house security managers with the support of a group of highly experienced Board Certified Protection Professionals Certified in Security Management. This management support will be facilitated through the use of PPM 2000’s Perspective Premium Security Management Software. This software will be provided by SMSI on a subscription basis and will reside on a secure hosted site with no local software installation required.
 
SMSI Assumptions
  • The client has, or is considering implementation of an enterprise-wide formal security program and strategy.
  • The program has a designated security manager or an individual responsible for oversight of the security program in addition having other managerial responsibilities.
  • The security program has or intends to include the application of security measures, that may include, but is not limited to:
    • Access management system
    • Closed circuit television usage
    • Alarm system
    • Information protection programs
    • Uniformed security personnel
      • Contract
      • Proprietary
    • Investigation personnel
  • The enterprise is composed of an excess of 100 employees
 
Security Mananagement Support Components
The basic components of Security Management Services International’s Security Mananagement Support Program include, but are not limited to:
 
  • An initial comprehensive security assessment. (It is important to establish a foundational basis from which to move ahead and to build upon moving forward.)
    • Physical security audit
      • Lighting
      • CPTED (Crime Prevention Though Environmental Design)
      • CCTV
      • Access management
        • Card system
        • Locking systems
      • Security personnel usage
    • Pre-employment practices
    • Inventory and supply chain management security
    • Exterior and perimeter security
    • Security training needs
    • Security awareness programs
    • Internal & external crime threat levels
 
  • Development of a Security Plan
    • Mission statement
    • Job descriptions
    • Workplace Violence Prevention
    • Metrics
    • RFP development if deemed necessary
      • Vendor selection oversight
 
  • Initiation of Perspective Premium Incident Management System
    • Establishment of the Perspective Premium Incident Management program
    • Security Management Support in setting up Perspective to ensure it meets site specific needs
      • Establishment of Perspective reporting, and other output functionality
        • Customized Reports
        • Charts
        • Graphs
        • Multimedia Presentation Capabilities
        • “State of the Art” Analytics
      • Ensuring that security decisions are data driven
 
  • Establishment of Security Management Support structure
    • Development and defining the support role of Security Management Services International, including but not limited to:
        • Determination of Site visits per year
        • Unlimited phone/online support service
        • Incident management protocol
        • Initiation and promulgation of Security Awareness Program
    • Response to special needs protocol
 
  • Investment
    • A one-time modest retainer
    • Contract for One Monthly Fee for Security Management Services, inclusive of the Perspective Premium monthly subscription
 
  • Benefits
    • These combined services clearly fit the description that “The whole is greater than the sum of the parts.”
    • The value of these bundled services is greater than the cost of the individual components.
    • The likelihood of reduced liability.
    • The reduction of both internal and external losses.
    • The assurance of achieving greater value and return on investment from the accumulated security vendors.
    • The result of maintaining a contemporary security program that addresses the needs of today and tomorrow.
 
Summation
Security Management Services International, Inc., through its Security Management Support Program is offering an innovative and unique alternative for the management of the security needs for a wide range of clientele. Organizations that may benefit from this innovative approach to security management include, but are not limited to:
§ Hospitals
§ Shopping centers
§ Apartment complexes and HOAs
§ Retirement and Elder-Care facilities
§ High-Rise Commercial Buildings
§ Manufacturing plants
§ Bio-Tech facilities
§ Educational institutions
§ Hotels
 
SMSI does not seek to replace the existing security program, its management and/or personnel. This programhas as a primary mission of enhancing the existing security program by improving its value added impact to the organization it serves. All too often securitydecisions areintuitively derived and may or may not sufficiently address specific needs. SMSI believes that security programs should be need drivenpredicated on hard data.       
January 17, 2009

Proprietary Security vs. Contracted Security Services: THE MIDDLE GROUND

Like many of the services that businesses require the question often arises weather to outsource services or to keep them in-house. For example, institutions such as hospitals outsource the management of food services, facilities management, housekeeping and the pharmacy. In the foregoing example the management may outsourced while the rank and file employees of these departments work directly for the hospital. With other businesses such as shopping malls, manufacturing plants and high-rise office buildings, the management remains in-house while the employees are contracted from agencies with a specialized skill-set, such as security guard agencies and custodial services.
 
There are advantages and disadvantages to outsourcing. As mentioned, outsourcing agencies offer a specialized skill set and therefore may perform the service better and more efficiently than could be achieved if the operations remained in-house. These same benefits, plus potential cost savings may result from contracted management and/or contracted employees, such as food service workers. The ability to stay within preplanned budgets is often facilitated by outsourcing.
 
The model most generally followed for security services is the management function almost always stays in house, but security personnel, such as officers and investigators may either be directly employed by the enterprise or they may be contract employees who work for companies like Securitas or Guardsmark.
 
In today’s tough economic climate security programs are going to have to be efficient and provide quantifiable return on investment. Security decisions, such as determining how many guards are needed, how many cameras are needed or how many card readers are needed, are going have to meet specific quantifiable needs and produce measureable results (metrics). Security managers will be required to justify their budgets to CFOs in terms of projected return on investment.
 
Security Management Services International, Inc. (SMSI Inc.) based in Newbury Park, California offers a set of unique security services aimed at improving security for their clients in an efficient and cost-effective manner. SMSI Inc. (www.smsiinc.com) through their Security Management Support programs is able to support security programs that are wholly proprietary, wholly contracted or a combination of both. The foundational basis for these services starts with a comprehensive security assessment culminating in a set of recommendations aimed at ensuring that the resultant security program is need driven.
 
Once the foundational basis for the security program is established and agreed to going forward, SMSI is able to provide any number of support services aimed at keeping the security program contemporary. Security is a dynamic discipline and security programs must continually be adjusted to meet emerging risks and threats. Therefore some of the services offered include: security design, RFP development, vendor selection support, project management and program oversight.
 
SMSI is also able to provide Security Management Support on an annualized basis. This means that SMSI will establish a partnership with the existing security management team by continually monitoring the efficiency of all security programs and by providing unlimited guidance and support to the onsite security personnel. SMSI will establish and encourage employee participation in need driven Security Awareness Programs as well as other workplace Crime Prevention Programs. SMSI Inc. is able to bring more than 150 years of diverse security expertise to bear on the mitigation of a wide range of security challenges. For question please visit www.smsiinc.com or call SMSI at 805/499-3800.
July 9, 2008

SMSI Inc. Consultant Honored

PRESS RELEASE
 
FOR IMMEDIATE RELEASE
 
Press Contact:                                                                                    
Vicki Moeser
phone: 703-518-1466, cell: 703-622-9516
 
ASIS International Announces the First Roy Bordes
Council Member Award of Excellence
 
Alexandria, Va. (July 9, 2008) Ronald Lander, CPP, is the first recipient of the Roy N. Bordes Council Member Award of Excellence. This award recognizes a member of ASIS International who has exhibited “selfless devotion at the volunteer level, emphasizing significant contributions at the council level over an extended period of time.” Lander is vice chairman of ASIS’ Information Technology Security Council. ASIS is the preeminent organization for security professionals worldwide.
 
Lander became an ASIS member in 1994, after retiring from the Los Angeles County Sheriff’s Department, where he was in the data systems bureau. “The mid-90s was when the Internet revolution started and Ron became active as an author and speaker for ASIS and law enforcement organizations,” wrote James Keith Flannigan, chairman of the Information Technology Security Council, in his nomination of Lander. “After realizing how unfamiliar security professionals were with the Internet and computers in general, Ron designed and presented a course on ‘Introduction to the Internet for Security Professionals.’”
 
Flannigan went on to say that as a member of the IT Security Council, Lander has attended virtually every meeting since he joined the council in the mid-1990s. “If he can’t personally make it to a meeting, he attends via the conference call,” Flannigan wrote. “He is always available to mentor new members. Whenever he gets in front of an audience, he goes out of his way to promote participation in ASIS and joining a council.”
 
The award is comprised of an all-expenses-paid trip (travel expenses, hotel accommodations and registration fee) to Atlanta for Lander to attend the ASIS International 54th Annual Seminar and Exhibits, to be held Sept. 15-18. Lander will be presented with a plaque at the closing luncheon on Sept. 18.
 
 
Lander is owner of Ultrasafe Security Specialists in Norco, Calif. High-profile estate owners, celebrities, grocery and department stores, hospitals, manufacturers, the hotel and restaurant industry, and law firms throughout the country have tapped his consulting, expert witness and integration expertise.

# # #
 
About ASIS International
ASIS International is the preeminent organization for security professionals, with more than 36,000 members worldwide. Founded in 1955, ASIS is dedicated to increasing the effectiveness and productivity of security professionals by developing educational programs and materials that address broad security interests, such as the ASIS Annual Seminar and Exhibits, as well as specific security topics. ASIS also advocates the role and value of the security management profession to business, the media, government entities and the public. By providing members and the security community with access to a full range of programs and services, and by publishing the industry’s No. 1—Security Management—ASIS leads the way for advanced and improved security performance.
 
 
May 26, 2008

SECURITY MANAGEMENT SERVICES INTERNATIONAL, INC. OFFERS A UNIQUE APPROACH TO SECURITY CONSULTATION SERVICES.

Security Management Services International, Inc. (dba SMSI Inc.) (http://www.smsiinc.com/) continues to provide security management expertise to businesses and healthcare enterprises. These services include threat and vulnerability assessments, security design and project management, and the establishment of employee involved security awareness programs. These services are provided by Board Certified Protection Professionals (CPP) certified in security management. All members of the SMSI Inc. team have more than 20 years experience in diversified security management. The essential mission is to develop programs that effectively protect persons as well as assets.
 
The President of SMSI Inc. is William Nesbitt, CPP, a security professional with more than 30 years of diverse experience. Bill is an experienced security manager having managed security operations across a broad spectrum of industries. He has provided his expertise to numerous hospitals, shopping malls, the biotech industry, and the lodging industry, to name just a few. He has testified as a forensic security expert in more than 500 litigations covering 46 states.
 
A novel and unique service offered by Security Management Services International, Inc. is their Security Management Support program: http://www.smsiinc.com/services/support.html Their Security Management Support program (SMS) provides SMSI’s clients with a high level of security management expertise on a continual basis without the accompanying payroll burden. Every business enterprise needs qualified security expertise, but some enterprises may not have needs on a daily bases. SMSI steps into this void by providing Security Management Support for existing security programs. By outsourcing security management, clients will enjoy the benefits of seasoned expertise without the expense of a high-paid in house professional.
 
How does this program work?
 
Security Management Support is initiated after completion of thorough security assessment. Once the needs of the enterprise have been established, SMSI will recommend cost effective changes and modifications. From this point forward SMSI will stand with their client by helping to improve and modify the existing security program with an eye to keeping that program relevant and effective into the future. A key element, SMSI will provide a web-based incident tracking and management system and will monitor that system so that rapid responses can be applied to ever emerging trends. SMSI’s Security Management Support program will provide experienced expertise to your security program without the addition of significant payroll burden.
 
Security Management is a dynamic enterprise.
 
This means that security programs must continually evolve. The security management team must constantly be sensitive to the early warning signs of emerging threats and vulnerabilities. This requires that every security program must establish and implement the backbone of a comprehensive computer-based security incident tracking system. This system must be designed to meet the specific needs each business or healthcare enterprise. The system, which is broadly defined as incident tracking, must have the capability of not only documenting and tracking security incidents; it must also have the capacity to track those security activities that are generally affirmative. Affirmative activities are usually documented in Daily Security Logs or Daily Activity Reports. The system must also facilitate the morphing of any Incident Report into an Investigation Report. SMSI Inc. will provide this web-based capability to its Security Management Support clients in order to ensure that the security program remains contemporary and reflective of the metrics generated by the web-based system. Both the client and SMSI will have access to this system.
 
All of the aforementioned services are available to, but not limited to the following businesses:
Ø Hospitals
Ø Hotels
Ø Office Buildings
Ø Biotech Companies
Ø Manufacturing Operation
Ø Construction Companies
Ø The Lodging Industry
Ø Shopping Centers
Ø Apartment Complexes & HOAs
Ø Sports & Entertainment Venues
 
For more information contact Bill Nesbitt, CPP at: bill@smsiinc.com or call at 805-499-3800.
March 28, 2008

California Lutheran University to Host Terrorism Presentation

Speaker and Hosted Buffet Luncheon
Topic: Militant Islamic Terrorism: Threats and Responses
 
When and where: Tuesday, April 29, 2008 11:30-1:30 Lundering Events Center (north campus) California Lutheran University, 60 West Olsen Rd, Thousand Oaks, Ca. (presentation will begin at approximately 12:15)
 
Speaker: James Biesterfeld, Special Agent (Ret) U.S. Army Intelligence
 
James Biesterfeld graduated with a B.A. in Education from Concordia University, River Forest, Illinois. After graduation, he joined the U.S. Army, initially as a Military Policeman. Some of his assignments included: Criminal Investigator, Ft. Belvoir, Virginia; Narcotics Investigator with the Joint Drug Suppression Team, Mannheim, Germany; and Commander of the guard, NATO, Giessen, Germany.
 
He was recruited into Military Intelligence as a Special Agent for Counterintelligence, where he was responsible for the investigation of National Security Crimes, including Counter-Espionage and Counter-Terrorism. He is a linguist in the Arabic and German languages. Some of his assignments included: Counterintelligence Activity, Kwajalein Atoll, Marshall Islands; Senior Special Agent, Operations Desert Shield and Desert Storm, Saudi Arabia; and the Discreet Surveillance Detachment, Frankfurt Germany.
 
In 1994, he established Sovereign Executive Services as an investigative company. Following the events on September 11, 2001, he authored several seminars designed to assist law enforcement in their anti-terrorism efforts. He currently is under contract to the California Department of Justice, Advanced Training Center. He has trained hundreds of police officers and federal security personnel in California as well as agencies in Nevada, Florida, Nebraska and Ontario, Canada. He has recently co-authored a textbook on Post Catastrophic Event management. He also consults on matters of anti-terrorism and threats assessments to companies in the private sector.
 
Sponsored by:
 
The CLU departments of Criminal Justice and legal Studies; Graduate program in Public Policy and administration; Political Science; the CLU Center for Equality and Justice; Corporate Security Division, Amgen Inc. Newbury Park and Allied Barton Security Services Newbury Park.
 
Reservations:
Space is limited. Please RSVP before Monday, April 20 indicating the company/agency and number of persons attending (names optional). For individuals please provide names and contact information.
 
Reservations and information contact:
Dr. Robert J. Meadows, Chair, Criminal Justice and Legal Studies
Email: meadows@clunet.edu  office:  805.493.3484, fax: 805.493.3479.
March 23, 2008

The Advantage of SECURITY MANAGEMENT SUPPORT PROGRAMS

Organizations such as hospitals, office complexes, shopping centers, hotels and industrial complexes are all having to face a plethora of new challenges in order to adequately protect their employees, their clients and their assets. Those facilities such as hospitals and hotels are finding themselves on the receiving end of lawsuits when claims of inadequate security are made by patients and/or guests who have been victimized by crime while on private property. The national news media on any given day is likely to report shooting in a hospital emergency room, within a shopping mall or at an educational institution. In today’s world we cannot ignore both the threat and reality of terrorism, both domestic and international, or those that may use the ruse of terrorism to gain national attention. Across the country news outlets report abductions and sexual assaults occurring in the parking facilities of malls and hospitals.
What we do not read about in the National media is the impact resulting from the loss of assets and property within the private enterprise sector. These types of losses have a negative effect on the viability of the bottom-line for most businesses. Most of those losses result from employee dishonesty. Hospital employees who are diverting drugs to satisfy their own addiction, store clerks who are cheating both the customer and their employers by diverting revenues to their own pockets or hotel employees engaged in identity theft are all negatively impacting the industries they are employed by, in numerous deleterious ways.
Because of the examples mentioned here, and as a result of the actions of some employees, the remedies afforded by a sound security program are more important than ever. Security is a multifaceted and multidimensional discipline and therefore remedies must be need driven. Although the primary goals of most security programs are anticipatory prevention and deterrence, the means for achieving these objectives are varied and situationally determined. Security is in fact a situational discipline meaning, “one size does not fit all.”
The application of effective remedies aimed at reducing risk and mitigating losses requires experience and expertise. Security managers must understand how to integrate security programs through employee education and the proper mix of security technology and security personnel. Unfortunately many security managers do not understand this mix and may therefore depend on security vendors for guidance. Security vendors, whether they are selling the application of security technology or uniformed guards, have a natural tendency to promote their products and/or services as an end all, be all; ignoring the real needs of the customer.
Most Fortune 500 Companies, most major hotels chains and most major medical centers have highly qualified security professionals managing their security programs. Qualified security professional are usually Board Certified Protection Professionals (CPP), certified in security management. Security professionals with the CPP designation generally demand and receive six figure salaries. However, not every organization needs a fulltime Certified Protection Professional running their hospital or shopping center security program. This is especially true with small to moderately sized operations. Yet, most hospitals, shopping centers and biotech companies need the expertise of a qualified security professional to assess and analyze emerging security and loss prevention needs. The identification of these needs requires the development of customized security and loss prevention training. Procedures must be developed that require employee accountability. Remedies such as closed circuit television need to be considered and properly applied, lest they become a waste of money. This means that most organizations require a qualified security professional to become a liaison between the organization and security vendors. Security professionals are needed to monitor the security program on a regular basis in order to ensure that it remains contemporary and effective.
Security Management Services International, Inc. (SMSI Inc.)www.smsiinc.com , a California based corporation is ready to fill the gap between those organizations with a well qualified fulltime security professional and those organizations who either do not have a fulltime need, or cannot cost-justify, a full time security professional. SMSI is able to offer their clients a thorough security assessment and needs analysis. They are able to provide ongoing support to less experienced security supervisors and a cost much lower than hiring a fulltime professional with the attendant benefit package. SMSI develops Security Awareness Programs (SAP) that encourages all employees to participate in the goals of an effective security program. SMSI will help their clients develop RFPs for perspective security technological enhancements thereby ensuring cost-effective solutions. SMSI is able to provide these services for a low fixed monthly fee. This fee, when annualized is usually significantly lower that the six figure income and benefit package of a full time qualified security professional.
Credentialed security professionals bring efficiency to security programs. They understand the framework of generally accepted security standards and benchmarks. They speak the laguage of security and know the required criteria that effective security personnel must measure up to. Security professionals are continually tuned to industry best practices. By bringing professioanlism to your security program, the quality of the program will improve, and frequently the cost will go down.
All SMSI Inc. personnel are Board Certified Protection Professionals with expertise in many industries such as lodging security, healthcare security, mall security as well as biotech and industrial security, to name just a few. Many of these professionals have testified on numerous occasions as court certified security experts for litigations where plaintiffs have asserted the premises failed to provide adequate and reasonable security. This means that the SMSI professionals understand how to avoid most of these security driven lawsuits. SMSI Inc. may be contacted through their website (www.smsiinc.com) or by calling 805-499-3800.
February 26, 2008

Does Your Security Progam Meet a Reasonable Standard of Care?

Security driven lawsuits continue to cost American Businesses millions of dollars every year. Lately the evening news informs us about mall shootings, apartment complex shootings, hospital shootings, college campus shootings and school shootings, all within the last two months. Most, if not all of these crimes will eventually produce lawsuits against the owners of the various respective business enterprises and/or schools.
These litigations, which are generally classified as premises liability lawsuits will be brought against various defendants under the theory that there was inadequate security to have prevented the crime. The question then becomes, how much security would have been adequate? That question is difficult to answer. Security lawsuits are very different from most other personal injury lawsuit largely because determining a reasonable standard is not easy. In medical malpractice lawsuits the reasonable standard that was breached is often apparent. In structural defect cases, engineers can usual show a design flaw that breached the standard. The same is usually the in product liability cases. Clearly in slip and fall cases the standard is usually not difficult to ferret out. No so for security cases.
Why?: Because security is a situational discipline. The efficacy and adequacy of security for any given location or for any business are determined by a wide range of factors specific to that entity.
What are some of those factors?
The level of criminal activity
o    The level of relevant criminal activity
The level of police presence
Previous incidents
The security measure employed
o    Security officers
o    Lighting
o    Surveillance systems
o    Access management
o    The use of barriers
Recent security analysis
Notice
The list above is representative of the kinds factors that may be taken into consideration in trying to determine how much security is reasonable.
For those of you who may become victims of crime, the most fundamental security method is your behavior. The National Crime Prevention Coalition has found that about 80% of the victims of crime would not have become victims if they had exercised a little more caution. This means that crime victims have some level of responsibility to reasonably avoid threatening situations. The degree to which an alleged victim may have partially caused his or her victimhood is referred to as “contributory negligence.” For example, if you walk into a nightclub and in the course of the evening, pick a fight with another patron, and that patron beats you to a pulp, you most likely have some responsibility for your own demise.
If you ever find yourself in a security related lawsuit, whether as a defendant or a plaintiff, it is important that your legal representation has experience with this category of personal injury law.
April 12, 2007

Undue influence: A Devastating Form of Elder Abuse, by Rachelle Zukerman, Ph.D.

A woman in her 70s has a sizable estate acquired from a lifetime of hard work and smart investments. Lonely and overly trusting, she falls prey to a much younger man who persuades her to sign over her assets to him.

A frail widower hires an attractive housekeeper to help him with various household tasks. She eventually sweet talks him into giving her large gifts of money to pay for nursing school, clear her debts and pay for her mother’s operation.

The elders in these scenarios do not have dementia. Most courts would find them competent. How then are they bamboozled into losing what has taken a lifetime to accumulate? These examples of financial abuse (a form of elder abuse) occurred because of an insidious process called undue influence.

The perpetrators of undue influence use various techniques and manipulations to gain power and compliance, exploiting the trust, dependency, and fear of older adults. Over time, the perpetrators gain control over the decision making of their unwitting victims.

Anyone can be unduly influenced including the stressed, ill, sleep deprived, lonely or frightened of any age, but the elderly are particularly at risk because of failing health, isolation and a tendency to trust. Margaret Singer Ph.D.,an expert on cults, brainwashing, and persuasion, has pinpointed several factors that perpetrators commonly use to groom potential victims. They include:

  • Isolation from others. Telling the victim she was abandoned by her relatives and cutting off outside communication by telling visitors or callers that the senior does not want to see or talk to them.
  • Building a siege mentality.  Making the victim believe that enemies (including healthcare providers and family members) are lurking everywhere. They convince their victims that these “enemies” are going to take away their houses, pensions and social security, and that they are going to put them in nursing homes.
  • Fostering dependency. They create the fiction that the influencer is the only trustworthy person and the only one who cares about the older person.
  • Creating a sense of powerlessness. Slowly but surely, the influencer persuades the senior that only they have the power to do anything to help the elder.
  • Making the senior fearful by exaggerating their illnesses and disabilities. The perpetrator treats the elder more and more fragilely, exaggerating their ailments.  
Who Are The Perpetrators?

Unfortunately, individuals who prey on vulnerable seniors are often the proverbial “wolf in sheep’s clothing.” They may appear to be warm, sympathetic and selfless friends, caregivers and even family members, but they are not. Their numbers include:

  • Psychopaths or sociopaths, who get wind of the money, resolve to go after it, and have no conscience about committing financial abuse.
  • Individuals with character defects whose greed is an overriding motivation.
  • People who perceive themselves as entitled to the money. They feel that they deserve to have the elder’s money or assets because their own lives have been fraught with hardship or because the older person wasn’t as appreciative of them as they should be.  
What Can You Do?

Family, neighbors, friends and professionals who come in contact with older people can help in the following ways:

  • Check that the elder’s health and nutritional needs are being taken care of. A perpetrator may try to weaken an elder’s will by getting the senior to discontinue medications, neglect their health and eat poorly. 
  • Keep the elder socially involved. The best insurance is for the older person to stay connected to relatives and people who they have known for a long time. Senior Centers and social service programs are also excellent resources.
  • Provide the elder with information about undue influence and unscrupulous people that prey on senior citizens. Urge them to be careful.
  • Advise anyone who has contact with seniors to be on the look-out for the signs that someone is attempting to control the elderly person for their own gain. 

If you suspect that an elder is a victim of undue influence, as soon as possible. Put every detail and all dates down in writing. States vary on abuse reporting requirements and procedures. However, each state has a service designated to receive and investigate allegations of elder abuse. The Eldercare Locator (800-677-1116) is a federal agency that will provide a referral to the proper agency for the area that the elder lives in.

Reporting suspicions of financial abuse via undue influence to the appropriate authority will begin an investigation and may prevent financial ruin or at least bring a halt to the elder’s suffering.

Rachelle Zukerman, Ph.D. is author of Eldercare for Dummies and Professor Emeritus at UCLA. Dr. Zukerman provides litigation support and consultation on elder abuse and standards of care in Skilled Nursing Facilities and other institutions which provide health care and housing to elderly individuals. Dr. Zukerman can be contacted at 818-313-8622 or DrRZuk@aol.com.

February 28, 2007

CCTV: When and Why to Use Closed Circuit Television

CCTV can be a useful adjunct to a high-quality, integrated security system, but if used improperly, it can also be a liability. Generally the use of cameras produces some deterrence to some types of crimes. Whatever deterrence does result, the deterrent value of all cameras is denigrated by those who use “dummy” cameras. Cameras can generally be classified into three categories of security applications.
 
First, cameras can be used to help control points of ingress and egress. For example, you may live in a building that has cameras focused on the entryway so that a tenant can view their visitor before granting or denying entry. Doors that are controlled with a card access system may also be monitored by cameras so that security personnel can monitor coat-tailing or grant entry to a recognizable employee. Cameras may also be placed to monitor fire stairwells and potential escape routes for would-be perpetrators. These cameras are usually monitored live and may be interactive.
 
Second, are those cameras that are primarily used to collect evidentiary documentation that may later be used in investigative efforts or in legal proceedings. These cameras are usually set up with shortened focal points with a limited field of view in the hopes of identifying suspects facially. These applications apply to banks, convenience stores, all night gas stations and ATMs. These cameras are used to document criminal acts and provide images of the perpetrator that will lead to apprehension. Cameras dedicated to this application may, or may not be monitored live, but in all cases they are recorded. Environments where evidentiary cameras are often monitored live are might be cameras that provide surveillance of gaming operations or loading docks. Generally this second group of cameras is primarily in place to protect assets.
 
If the second category of camera applications is aimed at protecting assets, the third group of cameras may be classified as “people cameras.” We believe people cameras should be monitored live, in most cases, by trained security personnel. This group of cameras is generally surveying “common areas.” Common areas that need to be under live surveillance include shopping mall parking lots and walkways, hospital exteriors, city streets as well as hotel hallways and elevator lobbies. These cameras should also be continuously recorded. Cameras that are watched 24 X 7 may include PTZ (pan, tilt, and zoom) cameras.
 
The greatest potential for liability issues arise from the use, or the alleged improper use, of people cameras. Citizens, who become victimized by criminals while under the watchful eye of a camera that no one was watching, often bring premises liability lawsuits. Those lawsuits can be successful if they are able to convince a jury the “they had a reasonable expectation that someone was monitoring the camera.” This is why there must be planning and forethought prior to installing this third camera application. If you are considering incorporating CCTV into you security program, as you consider each camera application, ask this question: Do I want to see bodies or faces?
 
Cameras can be a very useful and efficient security tool if used properly. With today’s technology, we are able to transmit these images over long distances. The manager of a golf pro-shop could check on his business from home by merely turning on his laptop. Certainly there are many uses for CCTV. The expansion of usage has been gained because cameras have gotten smaller and are able to perform well at low light levels. Citizens are incorporating cameras into home security systems. CCTV is often integrated with other security systems to help protect newborn babies while in the hospital or to activate when an alarm point is triggered. However, cameras should not be used in any environment were a private citizen has a reasonable expectation of privacy such as bathrooms and retail store changing rooms.
 
Please contact SSO with your CCTV questions.
February 3, 2007

The SSO Security Solution Hierarchy

Security Solution Hierarchy

Whether you are building a security program to better protect your home or to better protect your company, there must be some logic behind the plan.  Security solutions, in our opinion, arrange themselves in what is referred to as the Security Solution Hierarchy.  As you go through the Security Solution Hierarchy, you will see there is a logical approach to developing solutions that are cost-effective to each institution.  To ensure a maximum cost/benefit ratio for dollars budgeted to the security needs of the Hospital, it makes sense to approach the fixes the way they are suggested in this model.

The hierarchy contains three levels. The bottom of the hierarchy represents the least costly remedies, while moving up through the second and third levels the remedies become more costly.

Level One
Behavior Modification

The security solutions contained within this level include but are not limited to such methodologies as policies and procedures, education and security awareness, as well as the implementation of various types of public relations strategies intended to further the goals of a solid security and loss prevention program.

It is important, that all employees understand which behaviors are appropriate and which behaviors are inappropriate.  All too often, the assumption is made that everybody knows what is right and wrong; however, this assumption is often fallacious. Employees must know what is expected of them. To revisit security awareness as one of the topics contained in behavior modification, it is important to understand exactly what is meant. Security Awareness Programs provide a means for improved security through employee involvement and do so with little or no budgetary impact. Security Awareness Programs are the single most cost-effective method in gaining a positive, productive security and loss prevention program. Employees should be encouraged to take part in the goals of the security awareness program; and, furthermore, they should be sold on the benefits to them as well as the institution.  Security awareness programs, in fact, must be positive, not negative. The security goals contained in level one can mostly be gained through education and require little financial resources.

Level Two
Electro-Mechanical

Obviously, one cannot simply impose several policies and procedures and educate the employees and expect all the security problems to go away.  It often is necessary to ensure the security program has some teeth.  Therefore, it is necessary to implement various and appropriate physical security methodologies.  Some of those methodologies include lock and key systems, access control systems, closed-circuit television systems, alarm systems, lighting, etc.

It will be the goal of SMSI, to follow the guidelines of the Security Solution Hierarchy (see attachment). Therefore, the first objective will be to develop a set of recommendations that have little cost attached to them by recommending training as well as security awareness programs at your Hospital. Only after completing this level, will we delve further into solutions requiring electromechanical remedies. For example, it makes no sense to recommend the use of closed-circuit TV if there is no one assigned to watch the monitors unless the goal is evidentiary only. The ergonomics of watching a plethora of monitors must also be considered.

Level Three
Personnel

As we build our security program, develop policies and procedures, and ensure that we are making satisfactory use of physical security methods such as those mentioned earlier, it then becomes necessary to employ the use of security personnel such as uniformed officers.  Security personnel (or security surrogates) should be the glue that holds the entire security program together.  They give the program life, meaning and direction.  To the degree the security personnel are effective and competent, the security program works and to the degree that they do not meet satisfactory standards, the entire security program suffers.

The use of security personnel as a security method is the most expensive fix that one can apply.  It is, therefore, important that if security personnel are necessary, they personify the professionalism and integrity that a security program should exude.

These three levels referred to as the Security Solution Hierarchy provides a model and a framework within which the consultant can easily operate.  The Security Solution Hierarchy is always in the mind of the consultant when evaluating existing security methodologies and comes into play again when the consultant seeks to find remedies that are effective as well as cost-efficient. 

One of the ironies in looking at this Hierarchy is the tendency for many organizations to turn this Hierarchy upside down.  Often, the first response to a security problem is to go out and hire uniformed security personnel. If this is done without regard to the other levels of the Hierarchy, an inadequate security program is almost guaranteed.  The Security Solution Hierarchy provides a logical model from which to develop a comprehensive security program form the bottom up.

The key factor implicit in the Security Solution Hierarchy is that security solutions should start with low cost procedural and training solutions and progress slowly to more costly solutions, only if needed. Higher cost solutions should be applied, only after less costly solutions have been exhausted and significant risk remains.

February 1, 2007

Shopping Safe at the Mall

Over the last 40 to 50 years the Shopping Mall has replaced traditional downtown shopping in many regions around the country. This phenomenon has focused high concentrations of people into relatively small areas. This environment has provided fertile ground for a variety of criminal behaviors. The invasion of criminal behavior into the malls of America includes purse snatching, car theft and car break-ins, assault, shoplifting by committee and even homicides.

Criminal activity tends to be focused in two general areas, food courts and parking facilities. Although these areas represent the focus of much of the criminal activity, they are noted at the exclusion of other areas such as retail space restrooms, etc.

Where does mall security begin?
Mall security begins with the public. Most research seems to support the notion that if the victims of crime had practiced more prudent behaviors, they would not have been victimized despite the efficacy of the mall security program. Most of the effective behaviors only require the practice of “common sense” behaviors. Such behaviors include parking in well lit areas, keeping valuables out of sight in the trunk of the car, and being alert. Malls that uphold good housekeeping standards tend to be safer. For example, malls that are trashy, that have burned-out lights, and have graffiti on their structures are generally less secure than malls that are kept in pristine condition.

Parents need to know where there kids are. Parents cannot assume the local mall is providing a safe after-school program and babysitting service. Food courts are often the site of teenager on teenager conflict including gang conflict.

Shopping malls also have an obligation to maintain reasonably secure premises. Defining reasonable security is not easy because one size does not fit all. Shopping malls can only determine how much security is reasonable by conducting a thorough security assessment. It is best that the assessment be conducted by a qualified security professional. Clearly the mall must examine the history of criminal activity when assessing future needs.

Mall security does not merely mean the use of patrolling security guards. Shopping mall security results from a combination of mitigating strategies. Such tactics may involve the application of adequate lighting, access management plans, police patrols and the use of closed-circuit television. There are no universal standards, nor should there be, for adequate mall security programs.

Security is a situational discipline. The security needs of a shopping mall in Minneapolis may be completely different from a mall in Atlanta. The situational differences will determine the prudent solutions.

SSO invites your comments. If you are involved with mall management and wish to register your point of view, your comments are welcome. If you are a consumer and have experiences to share and concerns you would like addressed, SSO would like to hear from you. SSO also welcomes comments and articles from security practitioners and providers. It is the goal of SSO to bring security solutions to those with security needs.

January 29, 2007

Security & Liability

Security driven lawsuits continue to pose financial threats to a wide range of public and private enterprise. Security lawsuits generally fall into two broad categories. The first, and most frequent lawsuit, falls under the category of premises liability lawsuits. The second group is classified as intentional tort lawsuits.

Intentional tort lawsuits within the security genre are stemmed from the overt actions of an employee or representative of the enterprise against the plaintiff. An example of this category of lawsuit could be a sexual assault committed against a patient in a hospital by an employee, such as a male nurse. Another example might be an assault by a nightclub bouncer against a patron, resulting in injury. Private security officers, and their employers, may be sued for claims of false arrest, use of excessive force and false imprisonment.

Security lawsuits arising under the aegis of premises liability claims are brought by plaintiff’s who were victimized by criminals while on the defendant’s property and/or while the defendants place of business. Examples of this type of case might include a patron who was assaulted and robbed in the parking structure of a shopping mall. Another example might be a hotel guest who is assaulted by unknown third parties whiles the guest of a hotel. The question to be decided in this kind of case is the adequacy of security necessary to prevent and deter criminal activity.

The issues at stake in many intentional tort cases such as use of excessive force are often the adequacy of training, the efficacy of the hiring process and the sufficiency of supervision. For example if a security officer is hired without an adequate background screening, and through the discovery process it is found the officer has a criminal past, the employer may my found culpable of negligent hiring.

Clearly premises liability cases tend to dominate the media. Innocent bystanders who are assaulted by criminals in nightclubs, apartment complexes and parking lots may all file lawsuits asserting inadequate security. The question then becomes, “How much security is enough?” The answer to that question is not as easy as one may think.

Security is a situational discipline. One size does not fit all. Security solutions follow a Hierarchy. The SSO Security Solution Hierarchy will be discussed in a separate article. The only way to understand which security solutions are needed to reduce risk of crime is to complete a security assessment (security audit, security survey). It makes absolutely no sense to spend money for security guards, alarms and CCTV until the scope of the problem is evaluated.

Many of us who have been security professionals for many years know the driving force behind most security programs is a major incident. All too often, until something really bad happens, the tendency is to put security on the back burner. Often a major security incident is the trigger for a security lawsuit. At that point consideration of remedies is a day late and a dollar short.

One of the best ways to avert security litigation is to practice sound security and loss prevention planning. Security should be proactive, anticipatory and preventative. Sound security programs are intended to deter criminal activity. Let’s look at a few of the rudiments of a sound security review.

First, consideration must be given to the crime environment. There are various vendors that can provide statistical information regarding criminality for a given area. Police departments can also provide raw data regards the level and kind of crime for a given neighborhood. If the security assessment is being applied to a business enterprise or a healthcare facility, there must also be an evaluation of the internal threat as well as the external threat.

Second, there must be some consideration given to what is the intended purpose of the security solutions under consideration. Security programs, to varying degrees are dedicated to protection persons and to protection property. These considerations apply to protecting a high-rise office building or a private home.

Third, when protecting any facility that caters to the public the security program must meet a Reasonable Standard of Care. To put it simplistically, the security program must address the reasonably anticipated threats of the enterprise. Clearly the security needs of a nightclub in New York City differ from the security needs of a retirement community in Butte, Montana.

We believe at SSO that security assessments should be conducted by an objective qualified professional. The reason for the term “objective” is that it is not recommended the security surveys be conducted by security vendors who have a vested interest in selling you something.

If you have questions about security litigation or the security assessment process, please contact SSO and we will find some answers. If you wish to make comments or suggest solutions, your input is welcome.