Question You Should Ask Before Getting a

Home Security System For Christmas

Is a home security system on your wish list from Santa?  If so, here are a couple of things you need to ask before Santa puts your system in his bag.

The first two questions to ask yourself are, “What am I going to protect by buying this type of system?" Then, "Will it do what I want it to do?”  These sound like no-brainers don’t they?  Most of us would say, “I want it to catch the bad guy”.  Well, not really, because it won’t catch a bad guy.  It will let you know when there is behavior inside of your house or when your perimeter is breached. But it won’t tell you if the behavior is good or bad.  YOU have to do that.  YOU have to assess the behavior and determine if it's good or bad.  So, you want to be able to analyze the behavior, like your kids coming home from school or the mailman delivering a package and determine if it is friend or foe.  Which brings us to the next question, which is, “Who will monitor what the system 'sees' and who will respond when there is unwanted behavior?”

If you are relying on your local 911 or a police department response, then you need to find out what the local policy is for home invasion.  Some departments don’t respond immediately for a variety of reasons; sometimes due to competing priorities and sometimes because they don’t want to get there when the bad guy is still on the premises which may cause a “stand-off”.  They don’t want that and neither do you.

If you are relying on a service provider for response, you need to ask, “What is the guaranteed respond time?”  If it’s less than seven minutes the good guys will catch the bad guys.  If it’s more than that, the bad guy will get away with your stuff.  Actually you don’t want the good guys to get there while the bad guy is still there, as it increases the likelihood that someone is going to get hurt.

The National Institute of Justice reported a couple years ago that perpetrators of housebreaking/ burglary usually stay on site less than seven minutes.   I doubt it’s changed much in the last couple of years.

DO-IT-YOURSELF (DIY) SYSTEMS

Many professional installers will swear up and down that home owners cannot do this alone.  But let’s face it.  Just about anybody can do just about anything, given the right tools and knowledge.  Most home kits include instructions, so they’re pretty simple.  Tab A goes into Slot B.  If you can put together IKEA furniture you certainly can install a couple of cameras and sensors around your house.  That’s the tools part.  Now for the knowledge part – where to put cameras and where to put sensors?  Think of your house as an onion.  Start on the outer skin (property line) and work your way in.  Use a combination of sensors and camera that overlap so that all areas are covered by at least two components of your system.  Say a sensor and camera, or two cameras.  By using a combination of different technologies and creating an overlapping system you will, in all likelihood, get notified that something’s going on.  The chances of both systems failing simultaneously is very low.  Make sure you get "real time" notification.  The ability to talk into the system and tell the perpetrator that you're watching him or her (sorry ladies) is a plus.  However, it also let's the bad guy or gal know you are not at home.  So make sure you system covers the perimeter and you can engage before they ever get to the house.

HOME DELIVERY SERVICES

When Amazon recently announced that they would place your parcels just inside your front door if you signed up for this service many security folks cried “foul”.  They cited this service as basically allowing an intruder to enter your house.   Well, not really.  Amazon vets their delivery folks/employees during the hiring process.  If Amazon trusts them then why shouldn’t you?  Sure, there are always a few bad apples, but I see the risk of the delivery person rummaging through your house as a very low possibility since they don’t know if you’re going to come home suddenly and find them in the bedroom.  That just doesn’t make sense.  There are really two factors that are in play here that make this a good idea.  First, Amazon vets their employees and secondly the door lock and code is specific to your home. Additionally, the kit comes with a closed circuit television camera that you can set up to see if the person does more than deliver the package(s).   Plus there’s an electronic record of when the lock opened and when it closed.  Anything more than a minute or two, the amount of time to place the packages inside, would be cause for alarm and indicate something out of the ordinary happened.

If I ordered stuff on line and wasn’t home all day I’d use this service.

NO SYSTEM IS FOOL PROOF

Just remember that no system no matter how sophisticated is fool proof or offers one hundred percent protection one hundred percent of the time.  There will always be some risks involved.  The goal is to reduce the risks as much as possible and accept some risk.   

Is the Defeat of Terrorism Linked to Hidden Security?

Truly Effective Security Is Hidden

Image provided courtesy of Marshalls Landscaping Products

I’m truly amazed when I travel around the country and see closed circuit cameras everywhere; airports, shopping malls, street intersections – everywhere!   I read recently, that my image is captured several hundreds of times a day.  That’s scary.  So I guess, Big Brother is watching!  At least, that’s what I’m thinking and that's how I'm feeling.  The space makes me feel uncomfortable.  But should I be?

If I'm using the space shouldn't I feel comfortable while using it?  If the answer is, "Yes", and I believe it is, then the question is, “What makes good space?”  The factors range from access and linkage to other services, uses and activities within the space, comfort and image, and sociability.  All of these factors come in to play.  I'd like to focus on the comfort and image part of the equation.

Security as an Enabler and Not a Tax

A British friend of mine, says, “Security has to be an enabler and not a tax”.  By that he means, the environment must allow people to transit “freely and confidently”.   I hate to say it (after all he’s an Arsenal fan) but he’s right.  People will use the space because they can move within it freely and because of this freedom they feel confident that they are safe.

Where there is good quality of life, people want to live and raise their families.  The true measure of a Smart or Safe City is a place where the grandkids want to live and raise their families!

To make this happen Smart City planners will need a holistic approach.  They won’t be able to address a certain sector of society, say utilities for instance and voila’ everything is good.  It will require good infrastructure systems, good inhabited space design, good governance and good community involvement.  The right mix of technology from all sectors and behavioral sciences will be needed. Due to this holistic approach to community planning, companies wishing to compete in this space will need to bring in a variety of specialties in order to adequately meet the consumer’s needs.  As an example, inhabited space design cannot be a function of only architects and engineers.  It must also include security professionals, transportation experts, government officials, behaviorists, and even community members, both retailers and residents.

The reliance on physical security engineering will become paramount as we use inhabited space to mitigate unwanted behaviors and reduce its effects.  We cannot lose sight of the human aspect of using new technologies as we move forward. 

Electronic vs. Non-electronic Technologies

Unfortunately, electronic technologies are invasive.  They assault our daily lives as they collect more and more data about our habits, preferences and routine.  On the other hand non-electronic technologies are not invasive.  They “socially engineer” the space so that people using the space act how we want them to act.  Not because they feel threaten that “Big Brother” is watching but because good behavior begets good behavior.  The use of invasive technologies will need to give way to non-intrusive technologies.  This will take time.  But there’s no better time to start than now.

Immediately after the vehicle attack in Barcelona, jersey barriers started popping up in pedestrian zones and near sidewalk cafes.  This use of concrete barriers systems is extremely unsightly and only limitedly effective.  Instead of using barriers that worsen the quality of the space, we should think about the quality of space we are protecting and integrate aesthetically pleasing barriers into the environment that actually blend in and keep it picturesque – complimenting instead of spoiling.  Remember, no one wants security to be a tax, even if it’s only a visual burden.  Having ugly concrete jersey barriers right next to you while sipping your Brunello di Montalcino at an outdoor café table doesn’t project the atmosphere we are trying to achieve; however, flower planters, benches, light poles, bicycle racks, trash bins and the like that have been crash tested and proven effective against vehicle-ramming threats can enhance the atmosphere instead of hindering it.

Recently, Stefano Boeri, Architect[1] was cited by Dezeen Magazine as saying, “Cities should be redesigned to include trees with bulky planters rather than concrete barriers to prevent vehicle attack”.  He went on to say, “A big pot of soil has the same resistance as a Jersey (modular concrete barrier), but it can host a tree – a living being that offers shade; absorbs dust, CO2 and other subtle pollutants; and provides oxygen and a home for birds”.  We agree.

Hiding Security in Plain Sight

I believe we can “socially engineer” inhabited space.  We can incorporate specific urban design strategies that cause positive behaviors so that there is less reliance on the invasive use of electronic means to keep us safe. 

As an example; the use of “crash rated” street furniture.  It provides a measure of security from a ramming vehicle threat without making the space look like a threat is anticipated.  Another example, and perhaps even more hidden, is the use of furniture that incorporates ballistic materials, so people have something to hide behind during an active shooter threat.  Both solutions are currently available and in use in many unsuspecting areas.

Ultimately citizens don’t want cameras that watch their every move; instead they want space that is functional and free of crime and unwanted behaviors.  By increasing the effectiveness in controlling the social behaviors of the people using or transiting the space, and adding “passive” defensive mechanisms the environments will become safer and need fewer electronic gadgets.

As the great migration from the country-side to urban centers becomes an increasing phenomenon, community leaders must meet the challenges that lie ahead.  As systems of urbanization become ever more complex so will the solutions to resolve the problems they cause.  It’s imperative that not only will smart cities be highly functioning and efficient but they must also be, first and foremost – safe. 

---

[1] Boeri is known throughout the architectural and design world for his “plant and tree” covered buildings. 

Do-It-Yourself (DIY) or Credentialed Security Consultant, That Is the Question

My brother built his house.  He borrowed a back-hoe and dug the hole.  He set the foundation and built his house from the ground up.  I look at him and say, “why can’t I even drive a nail straight?”  Well, there are two reason, first he has the knowledge and secondly, he had the right tools.  I, on the other hand, don’t have the knowledge nor have I ever purchased any tools.  Oh sure, I can unplug the toilet or figure out that a fuse is blown but much more than that, I’m in the dark.  The pun was not intentional, I swear. 

This got me to thinking.  Whenever I have something around the house that needs more than my minimum skills I have to call someone.  They usually arrive and the first thing they ask is, “Who did this?” as they look at the thousand mile-an-hour tape or screwdriver wedged against the window or the string hanging from where the handle should be on the screen door.  Then they go about fixing it and charging me the equivalent of a mortgage payment.  They leave with a smile on their face and say, “Call us before you try to FIX IT again.  You’ll save money in the long run”. 

I asked my brother, where he got his knowledge and he told me that he asked lots of questions to people in the know and when he needed to, he bought or rented the tools.  If they had the skill set for roofing he asked roofing questions, same for plumbing and so on.  I was glad when he told me this because up to this point, I thought my Dad shared house building skills with him but not with me.  I was made at my Dad.  Forgive me Dad.

Well, the same holds true in security.  There are projects you can do on your own and there are things you really should get an expert to handle.  With the advancement in technologies in recent months you can basically, “plug and play” all types of electronic security systems.  This is a good thing.  I remember a day when programming the VCR was a disaster.  Even though my English is pretty good, I could never understand the instructions.  I had to get a friend to do it for me.  But back to security.  Electronic security systems have become sophisticated but you don’t have to be an “IT geek” to use them.  Most can be monitored on your phone with an App download.

But, if you’re going to assess your property and take a holistic approach you probably want someone with knowledge in vulnerability assessment/risk analysis or in developing mitigation strategies or someone with a Physical Security Engineering (PSE, SPSE or MPSE) designation.  If you have a very large project or are worried about cost overruns, you could also get someone with credentials from the Security Industry Association (SIA) in project management or a Certified Security Project Manager (CSPM®).  Another reputable organization is the American Society of Industrial Security (ASIS), which provides a variety of designations.   The security consultant having one of these credentials or designation is your guarantee that the person doing the job has the right tools sets and the knowledge to use them.

DIY is okay but remember one thing; good advice has a cost but free advice may cost you more.

FOUR TRICKS TO THE PRINCIPLES OF

EFFECTIVE PHYSICAL SECURITY DETECTION

 I recently had a newcomer to the security business ask me, “So, how would you describe what security is?”  I looked at her like, what a stupid that question is.  But after I thought for a second, actually it was a pretty good question.  A question many of us would provide varying definitions of.   My answer was pretty short.  Security is, the detection of behavior – good, we reward; i.e., password or PIN and we allow you access to the computer or ATM, bad, we deny access. 

Simple, right?  Yes.  So, the questions become, “How do we ensure effectiveness?  How do WE determine good or bad behavior?  Where should we do it? And, how do we make sure we know the difference?”

AS FAR AWAY AS POSSIBLE

Detect activity as far from the asset, thing you’re trying to protect, as possible.  We want to detect all behavior.  Then we can decide if it’s good or bad.  Good behavior – we allow access and bad – we don’t.  When it comes to valuables or assets, anything of value can be considered an asset.  An asset is something you place value on.  It could be a building, a process, an object or people.  Even my crazy cousin back in Indiana could be considered an asset.  Ok, well maybe not my cousin.  But you get the gist.

An asset doesn’t have to have value to the owner.  As long as it has value to somebody, then it is an asset.  I guess that means my cousins back in.

We want to protect those things we value at the furthest opportunity we can afford; either at the property line or even before, if possible.  Usually we do this by defining our property line.  We use fences or signs or other materials that say, “Hey, this is my space, so stay over there and I don’t care what you do, but come over here.  I want to know about it”.  In the old days, we had to post a guard to detect penetration.  Today, we can use electronic technologies that assist us in detecting when people come into our space.

You can access my article “More Power to the Perimeter” starts on page 31. http://issuu.com/securitymiddleeastmagazine/docs/sme_july-_aug_2015_web?e=0/14330179

IT’S ABOUT DETECTING UNWANTED BEHAVIOR

Electronic or non-electronic detection, it really doesn’t matter.  It’s about detecting behavior and then deciding if it should be rewarded (allowed entry) or not (denied access).  I often ask my students if they think we should detect all behavior or just the “bad”.  Most say, just the “bad”.  We don’t have the time to watch everything.  Well, actually we do. It’s just that we’re a lot quicker in rewarding “good” behavior than when something wrong happens.  As long as the rules are followed, everything’s fine.  Let someone forget their badge or password and well, and then the problems start.

BEST DETERRENCE IS A WELL-TRAINED STAFF (YOU WERE EXPECTING ME TO SAY GUARD FORCE, WEREN’T YOU?)

Actually, having a well trained staff in knowing what constitutes good behavior is the best deterrence you can achieve.  Trained staff is a force multiplier.  That means more eyes on your environment.  Trust me; your staff knows when things are out of place or when something is just not right.  That doesn’t mean you’re going to get them to “rat” on each other but you can get them to think about protecting themselves and their colleagues.  I recently read an article about the creation of open office spaces adding to efficiency and productivity.  The psychological impact of the space adds to a sense of belonging and our natural instinct to protect ourselves and each other.  Use that to your advantage.

Teach folks what “suspicious” looks like, when and how to report it and when it’s okay to intervene themselves without getting hurt.  Sometimes “bad” behavior can be corrected on the spot.  Other times the “authorities” need to get involved.  When reporting suspicious behavior, describe the “bad guy/gal” by comparing them to yourself; i.e., taller than me, heavier than me, blond hair like me.  While clothes description are important folks should focus on things that are less likely to be changed quickly; shoes or pants, complexion, color and length of hair.  The responding forces will need to know if any weapons were involved and if anyone has been hurt and where to find you.

DRILLS & EXERCISE STAFF & GUARD FORCE (OFTEN, CREATIVELY AND REWARDING)

Administrators and decision makers can increase the likelihood of detecting unwanted behaviors by conducting routine, periodic and creative drills.  Some drills should be done just for small groups, while others should involve everyone.  Sometimes with the guard forces and sometimes the guard should train alone.  There’s a difference between “preparedness” and “readiness”.  “Preparedness” is having material stockpiled and “readiness” is knowing where to get materials and what to do with them.

Follow me on twitter @hainessecurity for more security tips.

THE 5 MINUTE/5 DAY PLAN TO KEEP BURGLARS AWAY FOR

HOME AND BUSINESS OWNERS

Whether you’re a business owner or a homeowner “security” is about the protection of stuff and the people who use that stuff.  In the case of the business owners, that stuff is the store premises, the merchandise, the customers and employees.  At home, it’s about family members, keepsakes and property.  Even though, the stuff we are protecting is different, the concepts are the same.  They differ in application.  Good security means keeping someone from taking that stuff.  So, let’s look at what the business owner can do that the home owner can do as well.  For the next five days, we’ll spend 5 minutes each day taking steps that will keep would be “bad guys” away.

DAY 1 – From the outside looking in.  Stand on the outside of your property, beyond the property line or boundary and look at what you see.  You must do this on all sides of your property.  Remember, the “bad guy” will exploit your vulnerabilities no matter where he/she finds them.

Business/Homeowners – Look for avenues of approach, especially those that will allow access undetected.  If they exist, remove them to the maximum extent possible.  Since most likely you won’t be able to remove them entirely, add features that will assist you with detection; i.e., lighting, barriers (barriers slow forward movement or channel it).  The goal is to make it so that if the would-be perpetrator choses that route you will slow him/her down enough to detect him/her.  Warning:  CCTV is not a detection tool, so don’t think you can put a camera for detection.  CCTV is an assessment tool and as such, must be monitored 24/7 so that someone can assess the unwanted behavior, AND you must have a response force capable of responding within minutes.  If not, the “bad guy” will not get caught.  Another misconception is that, by putting a camera it will allow the police to catch the bad guy later.  Fact is less than one percent of the time this is true.  So, chances are you’d be wasting your money.

DAY 2 – Repeat Day 1 activities.  Return to the property line only this time at night or during hours of darkness.  Again, what do you see?  Additionally, look for any burned out exterior lights.  Lights are an effective tool in assisting assessment of unwanted behavior.  Bad guys don’t like light because it increases their chances of being caught.  

DAY 3 – Access points.  Walk to the nearest point of the structure where you would enter.  Then walk to the next one and so on until all access points have been looked at.

Business – This is usually an established entry/doorway from the public side-walk.  Check the locking mechanism.  Does the door fit snuggly against the frame?  Could someone “jimmy” the door open with a tool?  Don’t forget about your windows.  They can also provide access.  Just because they are large it doesn’t mean they won’t get broken.  The application of a fragmentation retention film (FRF), if installed properly, may assist with keeping the window intact and from being shattered.

Homeowners – This probably means that in the front of the house the access points would be the front door and any windows.  Check them for functionality.  Do this on all sides.

DAY 4 – Storage areas (shed/storage room/ garage)

Business – This may mean a separate structure or internal warehouse/storage room.  Observe the method of entry.  Can the door be secured when not in use?  Is the door monitored?  Does it need to be?  If a free-standing building, check all sides.

Home owner – If you have an outside building, such as, a storage shed where the lawn mowers, bicycles, etc. are stored, make sure there’s a lock that works.  Just because the shed is in the backyard, it doesn’t mean, a “bad guy” won’t get in to it.  If the bikes/lawnmower are stored in the garage, check the garage door that leads to the side or back yard.  Don’t forget about the car/driveway door.  Does it lock?  My wife always locks the door from the garage that leads into our laundry room and subsequently, in to our house.  Good job Honey! 

DAY 5 – Check your internal spaces. 

Business –  I was in a coffee shop the other day and noticed that they were using a laptop and a tablet for processing payments.  Both were left unattended on the counter.  It would have been real easy for an opportunists to grab the laptop or tablet and run out.  All they needed to do to reduce their risk was place the items behind the counter or on a shelf underneath and to take them out only when they used them.  If you own a business that stays open late or 24 hours, there are special considerations you need to make.  Primarily for the protection of your people/staff.  Remember, stuff can be replaced.  That’s why we have insurance.  People can’t.

Homeowners – The most common place for people to store valuables in their home is in their master bedroom.  Thieves know this.  Consider storing your valuables somewhere else that’s secure.  Just because you have a wall safe it doesn’t mean your stuff is secure.  The wall safe can be taken out of the wall if given enough time.  Remember, slow “bad guys” down so you can detect their behavior.

More tips and tools available at https://hainessecuritysolutions.com/Technology_Improvements  or by calling 805 509-8655.

 

 

How to

Assess Values, Threats, Vulnerabilities and Risks

 

           To accomplish its mission or function, every organization must protect personnel and critical assets from all threats, both natural and man-made.  

Spending limited funds to protect personnel, assets, and equipment is a delicate balancing act in risk management.  The question always arises: “Am I getting enough bang for my buck?”  Without a quantitative method for risk assessment and analysis, this question cannot be adequately answered.  Responding, “I think so,” simply won’t cut it.

Risk analysis methodologies fall into one of two categories – qualitative or quantitative. 

Using the qualitative method requires the assessor to be a subject matter expert.  He or she relies on his/her experience in order to conduct the analysis.  Over time, this type of analysis deteriorates as the assessor’s enthusiasm wanes in the twilight years.  Additionally, two assessors assessing the same asset will most likely arrive at differ results because they view what they see based on their own individual background and experiences.  Even the time of day will affect the outcome.  Think about it, who want to assess something right after lunch when their body is crying for a hammock?  This variation becomes especially critical when analyzing multiple assets.  The final drawback of the qualitative model is that it cannot be easily transferrable to others as it is based primarily on the person’s years of expertise.  All of that said, single assets that require to be assessed only once are good candidates for a qualitative assessment.

The second methodology involves assigning numerical values to differ aspects of the analysis.  By assigning values to certain features, the methodology becomes quantitative.  This is important, as the assessment doesn’t change between assessors because it isn’t based on their experience.  The old guy and the young guy observe and assign a value based on what they see.  There is or isn’t an 8-foot high chain link fence with 3-strand barbed wire outrigger.  Both analysts see the same thing and provide relatively the same analysis – so, it’s quantitative!  There may be a slight variance in the number they assign but usually not significantly.  Another advantage of quantitative analysis is that it can be easily taught and doesn’t deteriorate over time.  No matter how many assessments and analyst has conducted the results are consistent.  Quantitative analysis are especially effective when assessing multiple assets, where there is a need to compare asset values to determine prioritizing countermeasures.  Quantitative analysis allows decision makers to invest limited resources in reducing the risks to the greatest number of people first.  After all, isn’t that what it’s all about?

Next month, Ed Beakley, Director, Project White Horse 084640 will share his ideas on leadership during crisis.  More information about Ed and his 30+ years of research can be found at www.projectwhitehorse.com.