AUSTRALASIA’S LEADING SECURIT Y RESOURCE FOR BUSINESS AND GOVERNMENT SECURITY SOLUTIONS • IS SU E 10 9 • SEPT/O C T 2017
ISSUE 109 SEPT/OCT 2017
securitysolutionsmagazine.com
WHAT ARE AUSTRALIANS REALLY AFRAID OF? 001 SSM109 Cover-FIN.indd 3
14/09/2017 10:44 am
CUSTOMISABLE ELECTRIC HEIGHT ADJUSTABLE SIT STAND CONSOLES
Does your control room meet
Australian Ergonomic Standards?
www.activconsole.com
002-003_SSM109 DPS.indd 2
Clayton VIC 3168
21/08/2017 9:39 am
Safe Work Australia, Nov 2015
“...in 2012-13 the cost impact of work-related injuries and illnesses was estimated to be just over $61 billion...�
State-of-the-art ergonomic lifting technology Lifetime Australia phone support AS/NZS 4443:1997 & ISO 11064
+61 3 9574 8044
002-003_SSM109 DPS.indd 3
sales@activconsole.com
21/08/2017 9:39 am
RECOGNISING EXCELLENCE
Australian Security Industry Awards Nominations close 1 September www.asial.com.au
2017 EVENT
C
M
Y
C
C
CM
M
M
MY
Y
Y
CY
CM
CM
CMY
MY
MY
CY
CMY
K
CY
CMY
K
K
Winners announced - 19 October 2017 The River Room, Crown Melbourne. The Australian Security Awards Ceremony & Dinner The night is an opportunity to celebrate excellence and innovation in the security industry, and network with likeminded security professionals.
Organised by
Lead dinner sponsor
Entertainment and centrepiece sponsor
2017
#securityawards 004-005_SSM109 DPS.indd 2
22/08/2017 10:17 am
Thermal2017-5-18.pdf 1 2017/7/14 14:29:40 R
R
R
You Might Think
It’s Magic You Think You Might Might Think It’s It’s Magic Magic C
M
Y
C CM
M MY
Y CY
CM CMY
MY K
CY
CMY
K
Hikvision Thermal Cameras Reveal What’s in the Dark It’s not magic. It’s simple: the heat is on, even when lights are off. Heat replaces light in the darkness and Hikvision’s Thermal Cameras capture everything in vivid images at up to 640 x 512 pixels. Powerful Hikvision Thermal Cameras Reveal What’s in the Dark features make these cameras perfect for 24/7 perimeter protection, unhindered by any weather or light condition – features like temperature-anomaly detection effectively prevent emergencies, and It’s not magic. It’s simple: the heat is on, even and whenfire lights are off. Heat replaces light in the darkness Hikvision Thermal Cameras Reveal What’s in the Dark Smart behavior analyses including line-crossing detection and intrusion detection in open and and Hikvision’s Thermal Cameras capture everything in vivid images at up to 640 x 512 pixels. Powerful expansive areas. Safeguard critical infrastructure and any other application, anywhere, anytime.or light features make these cameras perfect for 24/7 perimeter protection, unhindered by any weather It’s not magic. It’s simple: the heat is on, even when lights are off. Heat replaces light in the darkness condition – features like temperature-anomaly and fire detection effectively prevent emergencies, and andSmart Hikvision’s Thermal Cameras capture everythingdetection in vivid images at up todetection 640 x 512inpixels. behavior analyses including line-crossing and intrusion open Powerful and features make these cameras perfect for 24/7 perimeter protection, unhindered by any weather or light expansive areas. Safeguard critical infrastructure and any other application, anywhere, anytime.
condition – features like temperature-anomaly and fire detection effectively prevent emergencies, and Smart behavior analyses including line-crossing detection and intrusion detection in open and Hikvision Oceania expansive areas. Safeguard critical infrastructure and any other application, anywhere, anytime.
004-005_SSM109 DPS.indd 3
Unit 14a, 2 Eden Park Dr, Macquarie Park NSW 2113 Tel: +61 2 8599 4233 Email:salesau@hikvision.com Hikvision Oceania Unit 14a, 2 Eden Park Dr, Macquarie Park NSW 2113 Tel: +61 2 8599 4233 Email:salesau@hikvision.com
www.hikvision.com.au
www.hikvision.com.au
22/08/2017 10:17 am
ISSUE 109
34
FEATURES
54
CONTENTS
108
62
70
78
COVER STORY
At a time when the Australian public’s concern about security issues are at a decade high, John Kendall, director of the Border and National Security Program, Unisys, explores why concerns are so heightened and what organisations can do to restore consumer trust in their safety.
82
34 CISOS ON THE RISE, BUT MANY ORGANISATIONS STILL LACKING ADEQUATE CYBERSECURITY
According to ISACA’s State of Cyber Security 2017 research, 65 percent of organisations now have a dedicated chief information security officer (CISO) on staff. However, research also showed that, while cybersecurity budgets have expanded, the rate of growth is slowing. Why is this decreased growth occurring at a time when cyber threats are increasing and becoming more sophisticated?
62 FIXING SECURITY RISK MANAGEMENT:
FOCUS ON THE THREAT ACTOR
Government and private industry place enormous emphasis on the concept of Risk Management and Security Risk Management, despite the fact that it has been shown that in areas where the concepts of Risk Management and Security Risk Management were implemented, crime rates actually increased. Does such a significant trend mean we need to rethink the effectiveness of the concept, especially when applied against an actor with intent to harm?
70 THE SHAPE OF THINGS TO COME
We caught up with Serra Luck, Vice President, End-User Consultant Business for HID at this year’s Security Conference and Exhibition, and spoke to her about the future of access control.
82 CONFRONTING AN ISIS EMIR
Most experts agree that the most successful counter-messaging campaigns against ISIS are the ones that utilise the voices of insiders: the voices of ISIS victims and ISIS cadres themselves who have first-hand knowledge of the group’s brutality, corruption, religious manipulation and deception. We look at the work being done by The International Centre for the Study of Violent Extremism (ICSVE) who have spent the last two years interviewing ISIS defectors, ISIS prisoners and returnees from the Syrian and the Iraq conflict in Western Europe, Turkey, Iraq, Central Asia and the Balkans, capturing their stories on video and editing them down to short clips, interspersed with actual ISIS video footage and pictures, illustrating their stories to turn back against ISIS. 6 // SECURITY SOLUTIONS
006-009_SSM109 Contents.indd 6
REGULARS 10 LETTER FROM THE EDITOR 14 LEADERSHIP
Jason Brown looks at the responsibilities of leadership.
16 CYBER SECURITY
We bring you our top 10 cyber security blogs?
18 RESILIENCE
Dr Rita Parker looks at the issues around data privacy and resilience.
20 HUMAN RESOURCES
Greg Byrne presents the third part of his special on conducting workplace investigations.
22 RISK MANAGEMENT
Dr Kevin Foster asks, what is a Risk Assessment Context?
24 COMMUNICATIONS
How can you increase prices without driving away customers?
26 LEGAL
Our legal expert explains why owning your own business can be a mistake.
28 THINKING ABOUT SECURITY
Don Williams examines the pros and cons of red teams.
30 EVENTS
38 ALARMS
We bring you all the highlights from this year’s Security Exhibition and Conference.
42 OPERATIONS
Richard Kay examines fear and its impact on survival.
46 CCTV
How is deep learning making CCTV smarter?
94 SECURITY STUFF 96 SPOTLIGHTS 102 PROFILES 108 PRODUCT SHOWCASES 112 SHOPTALK
Company announcements from within the industry.
50 BUSINESS
Dr Gav Schneider and Kate Down look at Dynamic Risk Equilibrium.
60 LEGAL Q&A
We take a look at workplace health and safety laws in the context of security.
66 LOSS PREVENTION
We present the second of our two-part special on the role of loss prevention across the retail supply chain security program.
74 AVIATION
What is the most important part of addressing aviation security?
78 ACCESS CONTROL
Is a new threat emerging for access control brands?
90 GLOBAL SMART HOME MARKET
A look at upcoming industry events. securitysolutionsmagazine.com
21/08/2017 3:40 pm
Series 280 is an IP66 rated industrial 19” cabinet for harsh and unforgiving environments – air conditioning available.
The last thing on your mind is the first thing on ours.
DESIGNERS & MANUFACTURERS OF 19” RACK SYSTEMS
Whether it’s ready-made, pre-configured or custom racking solutions, MFB’s short turnaround capabilities speed your product from the warehouse to where they should be – fast. Our unwavering commitment to timely delivery ensures your projects run on time, every time, reducing deadline pressures while maximising results. With a solid history of over 45 years supplying innovative, off-the-shelf and custom built racking systems, you can rely on MFB for consistent delivery, on time, every time.
AUSTRALIAN MADE MAKES AUSTRALIA
www.mfb.com.au
006-009_SSM109 Contents.indd 7
VIC NSW -
P (03) 9801 1044 P (02) 9749 1922
F (03) 9801 1176 F (02) 9749 1987
E sales@mfb.com.au E sydney@mfb.com.au
21/08/2017 3:40 pm
Sign up to our eNewsletter and receive up-to-date valuable information regarding all things Security.
www.securitysolutionsmagazine.biz/newsletter
006-009_SSM109 Contents.indd 8
21/08/2017 3:40 pm
EC - S
TALL. FAST. STYLISH. Our award winning speedgates combine state-of-the-art optical technology with a high barrier height to protect your building.
EASYGATE SPT
• • • •
Barrier heights up to 1800mm Fast throughput (up to one person per second) Ideal for Disability Discrimination Act compliance Choose from a number of models, including the LX, SPT, SG, IM or LG • Custom pedestals with an array of attractive finishes EASYGATE LX
Find out which security gate is right for you.
1300 858 840
www.entrancecontrol.com.au
EASYGATE IM
FULL HEIGHT TURNSTILE
EC - Security Solutions Ad.indd 1 9 006-009_SSM109 Contents.indd
TRIPOD TURNSTILE
SWING GATE
6/02/2017 10:37:16 AMpm 21/08/2017 3:40
FROM THE EDITOR www.securitysolutionsmagazine.com
EDITORIAL
EDITOR John Bigelow EMAIL john@interactivemediasolutions.com.au SUBEDITORS Helen Sist, Ged McMahon
CONTRIBUTORS
Garry Barnes, Karissa Breen, Jason Brown, Greg Byrne, Kevin Foster, Steve Lawson, Justin Lawrence, Rita Parker, Don Williams, Richard Kay, Dr Gav Schneider, Kate Down, John Kendal, David Harding, Jac Brittain, Jim Dearing, Oliver Philippou, Jo StewartRattray, David Gregory, Ardian Shajkovci
T
here should be little doubt in
out that a significant number of respondents
anyone’s mind that the security
and businesses in the industry saw real
industry is set to experience
opportunities in automation, cloud services
significant change over the next
and IP technologies, but felt that cybersecurity
few years. The Australian Security Market Review
was a significant challenge to the immediate
2017 provides a number of interesting insights
development of such opportunities.
that, while not necessarily surprising, serve to
A number of reports by highly regarded
reinforce some important trends and changes
cybersecurity research groups, such as Gartner,
that anyone operating a business in security
have repeatedly pointed out a growing dearth
Keith Rozairo PHONE 1300 300 552 EMAIL keith@interactivemediasolutions.com.au
should be aware of.
of cybersecurity professionals globally, which
DESIGN AND PRODUCTION
(IoT), Internet Protocol (IP) based technology,
of concerns around the safety of online
cloud-based solutions, big data and mobile
technologies. However, with the work currently
technologies will be the sources of greatest
being done in areas like deep machine learning,
change, potential revenue opportunities and
where machines essentially get smarter over
innovation over the next three to five years.
time as they analyse increasingly larger volumes
While this may seem obvious, the real question
of data, it is not inconceivable that, in the near
should be, “How will these areas impact the
future, machine intelligences will be capable of
security market?”
bringing cybersecurity to a level where many of
ADVERTISING
Jonathan Rudolph PHONE 1300 300 552 EMAIL graphics@interactivemediasolutions.com.au
MARKETING AND SUBSCRIPTIONS
PHONE 1300 300 552 EMAIL admin@interactivemediasolutions.com.au $62.00 AUD inside Aust. (6 Issues) $124.00 AUD outside Aust. (6 Issues)
ACCOUNTS
PHONE 1300 300 552 EMAIL accounts@interactivemediasolutions.com.au
According to the report, the Internet of Things
Take, for example, the IoT and the introduction
PUBLISHER
on the surface could be seen as confirmation
today’s threats and challenges no longer pose
of IPv6, the most recent standard for the
a significant problem. Any business that opts to
addressing of IP devices (every device that has
wait until the IoT is safe runs the risk of being
an online connection). The original designers of
left well and truly behind. As Eric Rees, the father
the IP defined an IP address as a 32-bit number
of lean start-up methodology often says, “There
and this system, known as Internet Protocol
is little point planting saplings when you need
Level 1, 34 Joseph St, Blackburn, Victoria 3130 PHONE 1300 300 552 EMAIL enquiries@interactivemediasolutions.com.au WEBSITE www.securitysolutionsmagazine.com
Version 4 (IPv4), is still in use today. However,
shade.” Smart companies will take resources
`j
because of the growth of the Internet and the
like this year’s Australian Security Market Review
jv
predicted depletion of available addresses, a
2017 and not just look at its findings as they
DISCLAIMER
new version of IP (IPv6), using 128 bits for the
stand right now, but will instead read between
ABN 56 606 919463
The publisher takes due care in the preparation of this magazine and takes all reasonable precautions and makes all reasonable effort to ensure the accuracy of material contained in this publication, but is not liable for any mistake, misprint or omission. The publisher does not assume any responsibility or liability for any loss or damage which may result from any inaccuracy or omission in this publication, or from the use of information contained herein. The publisher makes no warranty, express or implied with respect to any of the material contained herein. The contents of this magazine may not be reproduced in ANY form in whole OR in part without WRITTEN permission from the publisher. Reproduction includes copying, photocopying, translation or reduced to any electronic medium or machine-readable form.
WRITTEN CORRESPONDENCE TO:
Level 1, 34 Joseph St, Blackburn, Victoria 3130 1300 300 552 enquiries@interactivemediasolutions.com.au
address, was developed in 1995. Mathematically,
the lines and ask, “What insights can I draw from
the new address space provides the potential for
these findings to better position my business
a maximum of two to the power of 128 (2128), or
to take advantage of emerging trends and
about 3.403×1038 addresses. In layman terms, that
opportunities in years to come?” Disrupt your
means we could effectively assign an individual IP
market before someone does it for you. n
`
j
v
`v
`jv
h
address to every single grain of sand on earth and still have plenty of addresses left over. With such unprecedented levels of connectivity now available, what does this mean in the context of market opportunities for the security industry? More importantly, how might this level of connectivity be deployed in a useful and useable fashion? Too often in the security industry we see engineers building solutions because they can, rather than focusing on customer needs. Smart businesses in the security industry will take new opportunities around
SSOCIATI
ON
big data and mobile technologies, and build
O
RALIA LTD
SECURIT Y
PR
UST FA
O
things like the IoT, cloud services and storage, RS A DE VI
Official Partners O C I AT I
ON
Y P R OVI D
RIT CU SE
PR O
ASS
SPAAL
frustrations rather than simply rehashing their current offering to make it fit the new paradigm.
D LT
STRALIA LTD AU
SECURITY
RS
AU S T R A L I A
SSOCIAT IO N OF
RS A DE VI
solutions based on customer pain points and
OF
E
O rigin a l Siz e
The security industry must also develop blue colour changed to this colour green.
COPY/ARTWORK/TYPESETTING APPROVAL Please proof read carefully ALL of this copy/artwork/typesetting material BEFORE signing your approval to print. Please pay special attention to spelling, punctuation, dates, times, telephone numbers, addresses etc, as well as layout.It is your responsibility to bring to our attention any corrections. Minuteman Press assumes no responsibility for errors after a proof has been authorised to print and print re-runs will be at your cost. Signed.................................................................. Date........................
10 // SECURITY SOLUTIONS
010-013_SSM109 Editor's Letter.indd 10
the ability to look over the horizon. The
John Bigelow
Editor / Security Solutions
Australian Security Market Review 2017 points
securitysolutionsmagazine.com
22/08/2017 10:47 am
`
j
v
`j
jv
`v
`jv
h
THE ALL-NEWTXF-125E BATTERY OPERATED QUAD BEAM Introducing the eagerly anticipated TXF-125E; a high performance Quad Beam sensor designed for battery operation - perfectly suited for rapid deployment in creating temporary or permanent secure perimeter intruder systems. With 4 selectable frequencies, multiple beam sets can be used without crosstalk, whilst adjustable detection distance allows a single beam set to be re-deployed in a variety of installations throughout its operational life. Two 3.6V (17Ah) batteries power each unit for up to 5 years of service.
NEW!
ACTIVE IR BEAMS The ultimate in trouble free perimeter detection for distances up to 200m outdoor / 400m indoor.
+61 (3) 9544 2477
email: oz_sales@takex.com
HIGH-MOUNT PIR Triple mirror optics for maximum detection performance at 2 to 6m.
BEAM TOWERS Rugged floor and wall mounted enclosures in 1/1.5/2/3m heights.
INDOOR PIR Spot, 360°, wide angle, and curtain detection from 2 to 4.9m height.
OUTDOOR PIR Hard-wired or battery operated outdoor PIR up to 180° x 12m .
1300 319 499 csd.com.au www.takex.com
TAKEX AMERICA
VIC: Mulgrave, Tullamarine NSW: Northmead, Waterloo ACT: Fyshwick QLD: Loganholme SA: Marleston WA: Balcatta 010-013_SSM109 Editor's Letter.indd 11
22/08/2017 10:47 am
READ OUR FREE DIGITAL MAG Search ‘Security Solutions’ on issuu.com
Or go to goo.gl/A2BdNu
securitysolutionsmagazine.biz
010-013_SSM109 Editor's Letter.indd 12
22/08/2017 10:47 am
STOP TAILGATING AND OTHER UNAUTHORISED ENTRY ATTEMPTS
NOW AS EASY AS 1,2,... 1
2
1
Take 1 standard access controlled door with tailgating problems.
Tailgating is the art of unauthorised people following authorised people through an access controlled door.
www.pathminder.com.au
010-013_SSM109 Editor's Letter.indd 13
2
Add a PathMinder HPJ half portal.
The PathMinder HPJ half portal can ‘cap’ any access controlled door to turn it into a secure interlock, the highly sophisticated ultra sonic tailgate detection technology makes sure access is limited to one person at a time.
3
Sit back and relax, job done.
With over 40 portals in the range, PathMinder has a high security solution to controlling access at any entry point. Our portals include vandal, attack and bullet resistant certified designs, DDA compliant solutions and full customisable models to match your security needs.
Phone: 1300 750 740
22/08/2017 10:47 am
M S
LEADERSHIP
THE RESPONSIBILITIES OF LEADERSHIP BY JASON BROWN
I
was talking with some
know the answers, but the art is in
colleagues at the ASIAL
guiding and advising, not in directing;
conference about
the mentee needs to find his own
mentoring and related
course. The iLead project (https://
actions by leaders at all levels to help
www.ileadtalentexchange.com.au) is
others, particularly those just starting
a great way for security professionals
out, and it made me consider the
to get involved.
attributes of leadership that go to
VISION Creating a compelling vision for the future, combining the gathering of complex information from different sources with out-of-the-box thinking
by creating a shared sense of purpose and a learning culture CONNECTION Embracing and leveraging diversity across perspectives and cultures while creating positive emotions in others
Pay It Forward where the young hero
Number Two – Contributing to Teaching and Education
calls his plan “pay it forward”, which
Leaders who have managed to reach
means the recipient of a favour does
the dizzy heights have probably
a favour for three others rather than
learnt something along the way. It is
paying the favour back. The story,
time to pass on those experiences in
while emotionally manipulative,
a more formal way by contributing
made a point about the individual’s
to courses in the technical and
to being on a standards committee
for security, both here and
capacity to pass on knowledge,
further education sector, or at
in Australia or internationally. These
internationally. There are more
opportunity and advancement with
institutes and universities. Lecturers
are ways that experience can make
opportunities to contribute in the
no other thought other than the
and tutors are often in demand,
a difference for others and the future.
space coming your way.
person he assists will do good in turn.
especially if they are also doing
Along with the above, leaders
‘giving back’ and ‘paying forward’. Readers may remember the film
In thinking this through, consider
some study themselves.
ACTION Managing uncertainty and change effectively, while showing courage, resilience and the ability to make sound decisions IMPACT Inspiring others to unleash their potential and talent
DRIVE Confidently pursuing challenging career goals with a thirst for learning and appetite for feedback
Jason Brown is the National
can also write for the security and
Security Director for Thales in Australia
more general press to pass on their
and New Zealand. He is responsible
pay back for the opportunities he has
official positions on school and
knowledge. In the social media age,
for security liaison with government,
and pay forward to those that can
college boards or other community
it is not that difficult to join in by
law enforcement and intelligence
make a contribution in future.
organisations that will allow leaders
sharing information, responding
communities to develop cooperative
to contribute the management skills
to legitimate requests and linking
arrangements to minimise risk to
they have developed.
people together who can assist with
Thales and those in the community
their respective objectives.
that it supports. He is also responsible
three things that a leader can do to
Number One – Mentoring
Alternatively, there may be some
Mentoring is a relationship between
relationship is a non-reporting
Number Three – Engage with professional institutes and representative bodies
one and replaces none of the
Groups like ASIAL, ASIS International,
(http://au.hudson.com/talent-
served on a number of senior boards
organisational structures in place.
the Risk Management Institution
management/hudson-leadership-
and committees, including Chair of
It is additional to other forms of
Australasia (RMIA), Australian
model). Readers may also wish to
the Security Professionals Australasia;
assistance, such as developmental
Information Security Association
Google images for leadership models
member of ASIS International
assignments, classroom instruction,
(AISA) and the Security Professionals
– there is sure to be one to fit most
Standards and Guidelines Commission;
on-the-job training and coaching.
Australasia (SPA) are always in need
circumstances. Do not forget to do a
Chair of Australian Standards
It works best when a mentor
of those who can volunteer to take
bit of tailoring of the models; after
Committee for Security and resilience.
brings his professional and life
leadership roles. They can range from
all, everyone is a bit unique!
As of February 2017, Jason has been
experience to assist another person
judging the Outstanding Security
to chart his course in life. It is not
Performance awards or the best
the opportunity to participate in
Standards Committee for Risk
always easy, as the mentor may
new product in the Security show,
making and setting the standards
Management. n
two individuals based on a mutual desire for development towards career goals and objectives. The
14 // SECURITY SOLUTIONS
014-033_SSM109 Regulars.indd 14
In closing, these ideas fit in well
for ensuring compliance with
with a number of leadership models,
international and commonwealth
including the Hudson model shown
requirements for national security and
above, which deserves attention
relevant federal and state laws. He has
In the next article, I will discuss
appointed Chair of the International
securitysolutionsmagazine.com
21/08/2017 10:25 am
MULTIPLE CAPABILITIES SUPERIOR SOLUTION
Volvo Group Governmental Sales Oceania
IN HOSTILE ENVIRONMENTS, IT’S IMPORTANT THE SYSTEMS THAT YOU DEPEND ON CAN
STAND THE TEST OF TIME.
At Volvo Group Governmental Sales Oceania, our core business is the manufacturing, delivery and the support of an unparalleled range of military and security vehicle platforms; a range of platforms that are backed by an experienced, reliable and global network with over one hundred years of experience
superior solutions, providing exceptional protected mobility www.governmentalsalesoceania.com 014-033_SSM109 Regulars.indd 15
21/08/2017 10:25 am
CYBER SECURITY
TOP 10 CYBERSECURITY INFORMATION SOURCES T
here can be no doubt
malware discoveries, with insights
vulnerabilities, as well as strategies
Security, Sophos warn subscribers
that cybersecurity is
from experts.
for protecting enterprise data. It
about all kinds of bad computer
one of the hottest
Frequency – about eight
also offers guidance on setting
threats, including the latest
topics in the security
posts per week.
risk management and compliance
Facebook scams and rogue apps.
policies. However, be prepared
Frequency – about 34 posts per week.
world right now. In fact, it is one of the hottest topics around – period.
securingtomorrow.mcafee.com
for information overload as they
However, for the average physical
Just about everyone who has
post a lot.
security practitioner, staying
owned a computer is familiar with
Frequency – about 34
security.googleblog.com
informed about cybersecurity
McAfee, one of the best known
posts per week.
The latest news and insights from
trends, practices and technologies
names in anti-virus and computer
can be challenging to say the least;
security software. Now a part of
schneier.com
the Internet.
especially in a world where
Intel Security, McAfee produce this
Bruce Schneier is an internationally
Frequency – about three posts
information overload, a lack of time
fantastic blog full of security news
-renowned security technologist and
per month.
and an expectation that people
and resources on solutions for
author. Described by The Economist
should be able to do more with less
everyone from small business to
as a security guru, he is perhaps
grahamcluley.com
all make finding and digesting
enterprise organisations.
the only security practitioner to
A veteran anti-virus expert,
relevant information difficult. To that
Frequency – about 11 posts per week.
ever have been dubbed a ‘security
Graham Cluley specialises in data
rockstar’ by IFSEC. His blog covers
security, as well as the usual host of
end, we have compiled a list of what
Google on security and safety on
are, in our opinion, the top 10
krebsonsecurity.com
security and security technology.
computer security issues.
cybersecurity blogs from the leading
Brian Krebs is a household name
Frequency – about eight
Frequency – about 11
experts around the world. Why go
in information security, and his
posts per week.
posts per week.
looking for information when you
blog is among the most well
can have it delivered directly to your
known and respected in the space.
threatpost.com
infosecurity-magazine.com
smartphone, favourite device or
This is a daily blog dedicated to
Threatpost is an independent
Infosecurity Magazine is the award-
desktop? Check out some of these
investigative stories on cybercrime
news site and leading source of
winning online magazine dedicated
great blogs and simply subscribe to
and computer security.
information about IT and business
to the strategy, insight and
the ones you like. After all,
Frequency – about three
security for hundreds of thousands
technology of information security.
they are free.
posts per week.
of professionals.
This blog is an extension of the
Frequency – about 19
great work they produce through
posts per week.
their online magazine.
welivesecurity.com
darkreading.com
With around 1,838,316 Facebook
Dark Reading is the premier online
followers, WeLiveSecurity is one
resource helping information
nakedsecurity.sophos.com
of the most popular cybersecurity
security professionals manage the
Brought to you by Sophos, a world-
sites around. It is an IT security
balance between protection and
renowned provider of PC security
site covering the latest news,
access. It offers breaking news and
software, Naked Security is their
cybersecurity blogs. Check them
research, cyber threats and
analysis on attacks, breaches and
threat news room. Through Naked
out and get reading. n
16 // SECURITY SOLUTIONS
014-033_SSM109 Regulars.indd 16
Frequency – about 42 posts per week. So, there you have it, our top 10
securitysolutionsmagazine.com
21/08/2017 10:25 am
ATTENTION INTEGRATORS GOLD CLASS MOBILE ACCESS PROMOTION Upgrade your customers to experience the benefits of GOLD CLASS MOBILE ACCESS on their mobile device.
Increase your own income.
AT NO COST
Complimentary award winning HID Readers and Credentials Exclusive to ISCS
“Only having to carry one device for so many daily tasks is excellent.” ALISON BROWN Facilities, Operations & Events Manager, Netflix
AN ARA PRODUCTS COMPANY
HID Mobile Access®
Secure, convenient access control via your mobile device
ISCS is Australia’s HID Platinum Partner distributor
Contact
goldclass@iscs.com.au or 1300 111 010 and quote code GOLDCLASS Any size company considered, new or existing customers
014-033_SSM109 Regulars.indd 17
21/08/2017 10:25 am
RESILIENCE
DATA PRIVACY AND RESILIENCE – A CAUTIONARY NOTE BY DR RITA PARKER
he digital
information while maintaining
• the collection of solicited
transformation of
protection of data privacy and
personal information and
cloud-based data storage, while
society has added to
protecting the individual’s privacy
receipt of unsolicited personal
convenient for access, means
the complexity of
preferences and his personally
information, including giving
increased exposure to risks to the
doing business today for large
identifiable information from
notice about collection
data stored, which may belong to
corporations, international
inappropriate or unauthorised use.
conglomerates and small owner
This is particularly challenging
can be used and disclosed
business using the service. The
operators, as well as for individuals.
when data comes from a wide range
(including overseas)
increasing number of cyberattacks
Risks and threats are evolving on a
of information sources.
T
daily basis due to the widespread
In Australia, the Privacy Act
• how personal information
• maintaining the quality of personal information
For example, the trend to use
the online service as well as to the
on large and small organisations means that extra caution needs
use of internet-enabled devices and
1988 regulates how personal
processes. Recent high-profile
information is handled. The Privacy
cyberattacks demonstrate the
Act defines personal information
extent of possible losses to
as ‘… information or an opinion,
to access and correct their
specified data, as this would
institutions and business and their
whether true or not, and whether
personal information.
inhibit operational business
impact on civil society when the
recorded in a material form or not,
The challenge for many
needs. What is necessary is to
daily operations of banks, airlines,
about an identified individual, or
organisations is how to collect
ensure cybersecurity procedures
hospitals and other institutions
an individual who is reasonably
and use personal data without
are current and integrated into
have been compromised. This
identifiable’. The Privacy Act
breaching the Privacy Act. For
mainstream resilience management
situation has been further
includes 13 Privacy Principles that
example, while data collection
strategies and practices.
compounded by increasing physical
outline how all private sector and
agencies and marketers state they
Further information about
and financial damage relating to
not-for-profit organisations with an
keep users’ data private by viewing
the Privacy Act 1988 and Privacy
data privacy breaches. The
annual turnover of more than $3
it only in aggregate, the extensive
Principles can be obtained from the
challenge for business is to ensure
million and some small businesses
volume of data a cookie can collect
Office of the Australian Information
it protects personal and other
must handle, use and manage
about any individual can enable the
Commissioner.
information while simultaneously
personal information. These
cookie’s owner to infer a surprising
being able to utilise the information
Privacy Principles also apply to
amount about the individuals
the International Council of Security
for operational business needs.
most Australian and Norfolk Island
being tracked.
and Resilience Professionals and is
Online privacy faces new risks and threats with each emerging technology, which could affect
Government agencies and to all private health service providers. While the Privacy Principles are
• keeping personal
to be taken to protect personal
information secure
information and data. It is not
• the right for individuals
enough to simply ‘air-gap’ the
Obtaining consent from an
Dr Rita Parker is a member of
Centre Manager of the Australian
individual to a secondary use
Centre for Armed Conflict and
or disclosure is permissible,
Society. Rita is also a former
how web-based data is protected,
not prescriptive, each entity needs
but organisations need to be
Distinguished Fellow at the Center
or exposed. Privacy concerns exist
to consider how the principles
aware that under the Privacy Act,
for Infrastructure Protection at
wherever personally identifiable
apply to its own situation. The
the individual can reasonably
George Mason University, USA. She
information or other sensitive
principles cover:
expect that the secondary use or
provides advice to organisations
information is collected, stored and
• the open and transparent
disclosure is related to the primary
seeking to increase their corporate
used in digital form. The challenge
management of personal
purpose of collection or, in the case
and organisational resilience and
for business is to increase the
information, including having a
of sensitive information, directly
crisis management ability. Her
way it protects personal and
privacy policy
related to the primary purpose.
co-edited book, Global Insecurity,
other information, and thereby
• an individual having the option
enhance its business resilience.
of transacting anonymously
to understand and calibrate,
available in 2017, includes aspects
An additional challenge for many
or using a pseudonym where
especially given the significant
of her recent research about urgent
organisations is how to use
practicable
potential for related exposures.
global security policy issues. n
18 // SECURITY SOLUTIONS
014-033_SSM109 Regulars.indd 18
Cyber risks are complex
published by Palgrave McMillan and
securitysolutionsmagazine.com
21/08/2017 10:25 am
Presco™ Standard Keypad, Combination RFID Keypad and RFID reader New PrescoTM Range
Introducing the new range of Presco™ indoor keypads and readers. The Proximity reader and Combination keypad are advanced self contained RFID (Radio Frequency Identification) contactless devices. They are capable of interfacing to either a Wiegand input control panel or to the Presco range of PAC controllers. When any of these devices are coupled with the Presco™ PAC series of door access controllers you get the full benefits of a secure door access control solution with all of the features of the Presco™ protocol.
FEATURES The PSK16 is a direct replacement for the PRE keypad and outputs Presco™ data only. Installations require only 3 wires to the controller but can be made with 2 wires if the LED indication is not required The PSC16 & PSR16 output both Presco™ and Wiegand format data. Output type required is auto sensed via white wire connection. Read range of up to 20cm Compatible with Presco™ PAC access controllers and all other Presco™ decoders, the entire system uses low cost non-shielded cable and keypads and readers can be up to 1 kilometre from the door controller (power supply and cable dependent) Compatible with industry standard 26 bit wiegand systems, the keypad can output 8 to 64 bit or burst mode wiegand and custom proximity cards and tags are available for wiegand formats up to 64 bits
For more info www.presco.com.au
NIDAC SECURITY 2 Cromwell Street BURWOOD VICTORIA AUSTRALIA 3125
014-033_SSM109 Regulars.indd 19
Audible and visual confirmation of all actions. Designed and manufactured in Australia. 36 month manufacturer’s warranty
Phone: +61 3 9808 6244 Fax: +61 3 9808 9335 E-mail: sales@nidac.com
21/08/2017 10:25 am
HUMAN RESOURCES
CONDUCTING WORKPLACE INVESTIGATIONS – PART 3
BY GREG BYRNE
his is the third article
tribunal due to feelings of not
does not play any part in the
and all those involved. Sources of
on the correct and
being treated fairly. All parties
decision-making process.
evidence include:
(safe) method of
involved must be spoken to and
conducting an internal
provided the opportunity to have
‘sending a message’ to the
• informant information
investigation due to workplace
their say and present inculpatory
workforce play any part in the
• proceeds of a search
conflict or misconduct. The first two
or exculpatory evidence, as the
decision-making process.
• observations
articles in previous issues of Security
case may be.
T
Solutions Magazine outlined the
• It is possible to summarily
o Do not let the temptation of
• letters of complaints
• The HR manager should not be
• interviews
given the sole responsibility
• statements
steps involved in conducting an
dismiss (sack on the spot) an
in deciding the outcome of an
• documents
investigation. This article will outline
employee, but due process must
internal investigation. Before
• photographs
some common pitfalls with not
be followed. Employers have
taking any disciplinary action,
• emails
conducting an internal investigation
the right to summarily dismiss
ensure that the investigation
• forensic evidence
correctly or of not conducting
for conduct that is serious
has complied with any legal
• computer records
one at all.
enough to justify it. However,
obligations and that it has
• other physical items.
prior to doing this, all the
followed the organisation’s
Investigators are not bound to only
companies ignore the need to
evidence and all the available
policies and codes of conduct.
look at certain types of evidence;
conduct an internal investigation,
options must be considered. For
Failure to conduct competent
they are obliged to consider any
and that is because it is hard. The
the summarily dismissal to be
internal investigations could
evidence that is relevant, reliable
process is often referred to as
lawful, it must be established
have grave consequences for a
and fair. Failure to do this could
the dark side of human resources
that the actions of the employee
business. The following court
result in adverse and costly
(HR) and is something a lot of HR
being dismissed are serious
matters highlight some of the court
decisions against the business being
professionals and managers do
enough to warrant it. Before
decisions that have gone against
made by the Fair Work Commission.
not like to do. The reason for this
summary dismissal:
businesses who have not conducted
There is a plethora of decisions
is that investigations are complex,
o Ensure that the investigation
fair and reasonable investigations.
from the various industrial relations
There is one very good reason
involve expert knowledge, involve
is competent. If the matter
In one case, an employee was
tribunals in the country, as well as
some emotion (the perpetrator/s
being investigated might,
reinstated to his former role in the
from the various criminal and civil
and the investigators usually
if found to be true, warrant
company and, as compensation, his
courts that you could rely on to help
know each other) and are time
summary dismissal, an
employer was ordered to pay him
determine what is relevant, reliable
consuming. Without the correct
employer can consider
six month’s salary.
and fair. The terms are also defined
person conducting the investigation,
suspending the employee
• Bruce v AWB Ltd [2000] FCA
in the various evidence acts that
the outcome can be very costly to
subject to the investigation
• Concut Pty Ltd v Worrell
operate in each state of Australia.
all involved, including the company
until the outcome of the
as its employees and reputation
investigation is known.
• Smith v Aussie Waste
outline what bullying is, what effect
are dragged before the Industrial
o Be aware of the employee’s
Management Pty Ltd
it has on the workplace, what can be
[2015] FWC 1044
done about it and what happens if
Relations Commission. Some very important points to
employment record and establish if he has been
[2000] HCA
• John Pinawin t/a RoseVi Hair Face.
consider when either conducting an
subject to a previous
Body v Edwin Domingo [2012]
investigation or reviewing one are:
complaint or not and if that
FWAFB 1359
• The subject of the complaint must have been interviewed and been
previous incident was serious. o Be aware of and consider
• Lloyd & Co Pty Ltd v Shuttle ([2016] FWCFB 144)
My next series of articles will
nothing is done. Greg Byrne is CEO and director of Multiset Consultancy Pty Ltd, a multifaceted consultancy advising CEOs and boards of security organisations
offered the opportunity to defend
available options (including
himself or offer new evidence.
demotion, counselling,
Finally, ensure that the investigator
manage business risk, particularly
Failure to do this can result in
movement to another
has collected all available evidence.
operations, disaster recovery, business
an aggrieved employee who
workplace, or training) and
Evidence is any information that
continuity and human resources.
could become more of a problem
document the decision-
can be considered to assist in
Greg can be contacted via email
than previously was the case, or
making process.
determining a fair, reasonable
greg@multisec.com.au or on 0402
and just outcome for the business
295 124. n
who takes the matter before a
20 // SECURITY SOLUTIONS
014-033_SSM109 Regulars.indd 20
o Ensure that saving money
in Australia on best approaches to
securitysolutionsmagazine.com
21/08/2017 10:25 am
SMARTair™
Proximity access control Introducing ASSA ABLOY’s new Lockwood SMARTair™; a powerful access control system that is simple to install, simple to configure, simple to administer and maintain. SMARTair™ provides peace of mind for businesses small and large, knowing that lost credentials are no longer a risk, with the flexibility to restrict user movements within the building. Audit trails can show historical movement for reporting purposes. SMARTair™ offers an intelligent, yet simple, step up from keys, and a cost effective alternative to traditional access control. No bells, whistles, or wires, just sleek, reliable security. Available in standalone, offline, update on card and wireless online.
SMARTairTM Door Lock
SMARTairTM Knob Cylinder
SMARTairTM Wall Reader
SMARTairTM Cabinet Lock
S E C U R I T Y, S I M P L I C I T Y , C O N V E N I E N C E . Visit lockweb.com.au/smartair to learn more.
014-033_SSM109 Regulars.indd 21
21/08/2017 10:25 am
RISK MANAGEMENT
Co Fo
WHAT IS A RISK ASSESSMENT CONTEXT? BY DR KEVIN J. FOSTER
ecurity professionals
always a flurry of risk assessment
security and suggest a suitable
threats and vulnerabilities.
are often required to
activity because decision makers
budget to cover the cost. However,
For example, ISO31000:2009
conduct risk
want to know if their own
the strategic manager responsible
describes external context as the
assessments.
organisations or the societies they
for deciding what to do with the
key drivers and trends having an
Sometimes the security risk
protect are exposed to the changed
building might be more interested in
impact on the objectives of the
assessor might focus on
threat environment.
some other objective. For example,
organisation and includes the
Sometimes a societal or
there might be a strategic decision
values and perceptions of external
notices in his or her employer’s
organisational risk environment
to sell the building or lease it to a
stakeholders. For example, a security
facility or operations. For example,
might have changed due to other
tenant. The strategic manager may
intelligence agency or a central
if the risk assessor has an
factors that are not directly related
simply want to ensure that the
security policy agency might explain
electronics background, he might
to security, such as economic or
security systems are operational
the current threat environment
make quite a few suggestions about
political factors. For example,
and adequate for presentation
(such as terrorism) for a particular
how to improve access control
there could be an objective to
purposes. This is just one example;
industry sector at a national level.
systems, intrusion alarms and CCTV.
reduce expenditure through
there are many others where the risk
This context then needs to be
Of course, it might be useful for
efficiency gains. In this case,
analyst and the decision maker are
amended to fit the state level, the
decision makers in organisations to
the risk assessment might be
concerned about different issues.
market segment level and even
understand how security could be
requested to highlight potential
The risk assessor might think he is
the facility level. It all depends
improved in their facility or
savings in operational costs.
doing his job well, but the decision
on who the decision makers and
organisation. However, there is an
There are many reasons why a risk
maker could be presented with
stakeholders are.
important question that needs to
assessment could be needed in the
expensive security solutions to a
be asked: is an upgrade of security
decision process.
problem he does not want to solve!
S
vulnerabilities that he or she
really necessary? To answer this question, it
Clearly, it is important to
This strategic misalignment of
Senior decision makers need to consider which threats and risks might prevent their organisation
understand who the decision makers
security and business objectives can
from achieving its business
is important to understand the
might be and what their motivation
cause tension between the security
objectives. Security is only one
context of the decision problem. In
is for conducting a risk assessment.
operatives and the senior managers
category of risk that they need to
this article, I will try to explain this
In the absence of this information,
they advise. For this reason, it is very
consider. There can be many other
concept for people who are new
the risk analyst might be tempted
important for security professionals
categories. Security advisers need
to the risk assessment process and
to raise issues of concern to himself,
to understand the business
to ensure that their assessments
perhaps remind others.
instead of those that the decision
objectives of the organisation for
and advice are in the context of
maker wants to address. For
which they are providing security
the business objectives of the
dictionaries as the circumstances
example, a security consultant might
advice. They need to understand
organisation that they serve.
that form the setting for an
be concerned about the physical
what the senior managers are trying
event, statement, or idea. In
vulnerabilities of a particular
to achieve. The security goals need
managing director of Foster Risk
security reviews this generally
building that has poorly maintained
to align with those objectives in
Management Pty Ltd, an Australian
refers to threat events that might
security systems. The consultant
order for the security risk assessment
company that provides independent
present unacceptable outcomes
might explain how thieves could
to be in tune with the context.
research aimed at finding better
or unwanted impacts on the
exploit these vulnerabilities, and the
objectives of the decision makers. It
need for better physical security.
management standards emphasise
public safety, and improving our
seems that after any major terrorist
He might offer some good ideas
the need to define the context of
understanding of emerging threats
event in a Western country there is
about how to achieve more effective
the assessment before determining
from ‘intelligent’ technologies. n
Context is usually defined in
22 // SECURITY SOLUTIONS
014-033_SSM109 Regulars.indd 22
For this reason, most risk
Dr Kevin J. Foster is the
ways to manage risk for security and
securitysolutionsmagazine.com
21/08/2017 10:25 am
Contact us on 1300 364 864 Follow us on
Delivering Proven Solutions for Security & Safety We Protect People & Assets www.magneticautomation.com.au 014-033_SSM109 Regulars.indd 23
21/08/2017 10:25 am
COMMUNICATIONS
PUT YOUR PRICES UP? BY DAVID GREGORY
ricing is often
market will accept price change
ongoing understanding of what the
deemed as a black
before reacting against the product
market is doing.
art. It creates fear in
or business. Most businesses don’t
the hearts of
realise how diverse the pricing
of regular small increases rather
Secondly, many business
business owners and a sense that it
within their industry can be. To
than doing a substantial irregular
owners won’t raise prices out of
alone will decide on the success of
test the market, all a business
increase is far more appealing. To
fear of telling their customers.
their business. The reality can be
needs to do is ask the question.
this end, set yourself a timeframe.
You simply have to bite the bullet
quite different.
Call your opposition and ask for a
Have it diarised that each year on
and tell them. Where possible, tell
quote. Drop into an opposition’s
the 1st of July I will put my prices
them ahead of the price rise, but if
that told me he had “never” put up
business and look at their prices.
up. Then stick with it.
not possible, don’t apologise, just
his prices for existing customers.
Speak to the salesperson behind
His belief was that he would
P
I recently met with a business
For small business an approach
As a result, they will not leave for the devil they don’t know, for a measly 5-10%.
Advise the customers as part of
tell them. You will be surprised
the desk and ask what they charge.
the process. “Our annual price rise
at how many will just shrug, or
lose the customer, if they had to
While this seems simplistic, very
will take effect on the 1st of July,
say “about time”. They want you
pay more. When quizzed on his
few businesses actually do regular
come in now to take advantage of
around so they can buy from you
customer base, he said that many
market research. As a result they
the current prices”. This approach
again. As such, they expect you to
had become like friends and that
are robbing themselves blind in
not only trains the customers to
make a profit.
they all loved his service, but he
the process.
expect an annual increase, but also
was afraid of losing them. Progressively he had to keep
Statistically, most customers of small businesses will accept an
creates an incentive to buy now.
The greatest challenge you have to overcome in putting
Now that you have made a
up your prices is you and your
tabs on the prices he charged
increase of between 5 and 15%
commitment to yourself that price
confidence to do so. Believe in
because they had become different
without falling off their chairs in
increase will happen and you will
yourself and your product or
for each customer depending on
dismay. For a business with a large
manage their implementation, let’s
service. Your business and your
when they had begun buying from
and diverse customer base, it is
address your fears.
customers will be the beneficiaries
him. It had become a real headache
possible to test the impact of an
to manage.
increase by targeting a specific
buy from you because of price.
low risk group. If the prices are
Price may have been a factor
the Small Business Mentoring
would expect prices to rise and as
accepted, then expand the increase
originally but they have become
Service www.sbms.org.au , an
a business owner, you have to train
to the next group. For businesses
regular because of:
organisation that has supported
your customers to appreciate the
with a smaller base, perhaps a
• you
thousands of small businesses for
value you provide over and above
staged increase starting at 5% is
• your location
over 25 years. SBMS has over 140
the prices.
an easier entry point. The critical
• your service
Mentors in Victoria and NSW. He is
aspect is to start. A business needs
• your quality
also the Founder and CEO of The
price elasticity. This is a term that
to establish a regular approach
• your range
Small Business Institute. www.
reflects on the degree to which the
to their pricing aligned with an
• your uniqueness.
tsbi.com.au n
The reality is that the customers
Part of the approach is to test
24 // SECURITY SOLUTIONS
014-033_SSM109 Regulars.indd 24
Many regular customers do not
of your confidence. David Gregory is the CEO of
securitysolutionsmagazine.com
21/08/2017 10:25 am
TR
OR
014-033_SSM109 Regulars.indd 25
HÉE D’ OP
21/08/2017 10:25 am
LEGAL
STRUCTURING YOUR BUSINESS TO PROTECT YOUR ASSETS BY JUSTIN LAWRENCE
any people own their
and is unable to keep working or
name is owned by a company, that
bankruptcy as his greatest threat. To
own businesses, and
pay the rent – then anyone chasing
name could do. However, in an ideal
start with, Callum should not own
this is a mistake. At
the business for money will chase
world, a new company would be set
any assets of significance. His house
this point, you are
Callum. If he loses that fight, he is
up for that purpose. That company
and car should not be in his own
probably asking yourself what I’m
a good chance to lose the business
– let’s call it Doctor Callum Pty
name. As a proprietor of a business,
talking about.
and the lease.
Ltd – would apply for credit, issue
Callum’s assets are best held in
purchase orders and pay invoices
the names of others (even though
M
People should not own
If, however, the lease is held in
businesses in their personal
the name of a separate entity – let’s
on behalf of the business. If, for
Callum will be advised that holding
capacities. Businesses should
call his company Cal’s Security Stuff
any reason, the business had
his home in the name of a company
be owned not by the proprietors
Pty Ltd – then even if the business
insufficient funds available to pay
will have tax consequences which
of them, but by other people or
is sued, Callum has shielded the
creditors, then Doctor Callum Pty
would not otherwise apply if the
entities who are separated from
lease from the firing line as best
Ltd would be the entity sued for
house was in his own name). If he
the day-to-day operation of the
he can, and the business will still
the money. At the same time, the
can manage it, Callum should pay as
business. But how do business
have premises from which to
business name and lease would be
much money as he can afford into
owners structure themselves
trade. If Callum is the sole director
quarantined from that law suit.
his superannuation fund. He should
appropriately?
and shareholder of Cal’s Security
At any time during its trading
not go crazy with contributions,
Stuff Pty Ltd, then the company
life, Callum should undertake an
but they should be significant
Here’s a bit of an action plan:
will take whatever steps Callum
asset protection risk assessment.
and steady.
For starters, the business name
directs anyway, so he does not lose
As part of that assessment, Callum
should be registered in the name
any control.
should ask himself what is the
Callum is made bankrupt, he can
of a company or other entity. Take
Similarly, the business name
If, despite his best efforts,
most important thing he is trying
prevent the money paid into his
for example, Callum’s Security
of Callum’s Security Distribution
to protect and who represents the
superannuation fund being clawed
Distribution. Now, Callum is a
should also be held by an entity
greatest threat to that asset.
back by his trustee in bankruptcy.
young go-getter full of ideas about
other than Callum. Ideally, Callum
how to turn his online security
would have a separate company
protection structures may protect
be effective if it is put in place from
wholesale business into a multi-
that owns the business name – that
assets from creditors, but not from
the early days of Callum’s business
site, fully franchised operation.
is, a company other than Cal’s
matrimonial breakdown. Some
and the contributions are for
Callum intends to lease modest, yet
Security Stuff Pty Ltd. Then, even
structures may protect assets from
consistent and reasonable amounts.
comfortable premises in a semi-
if the company holding the lease
matrimonial breakdown, but may
Similar strategies exist if the
industrial part of the city and to
is wound up or liquidated, the
not protect from claims brought
risk assessment reveals matrimonial
throw his doors open for business.
business name would be kept free
against Callum’s estate after he
breakdown or claims against
from claims.
dies. Once Callum has undertaken
estates as Callum’s most pressing
his full assessment, he can structure
asset protection issue.
Who should be the tenant
For example, some asset
named on his lease? Not Callum,
When Callum’s Security
that’s for sure. Why? Because at
Distribution buys materials and
and plan his asset protection risk
this stage, the business is Callum. If
supplies, it should do so under a
strategy. Let’s look at one of those.
something happens to Callum – he
name other than Callum’s private
is sued or he is in a car accident
name. Given that the business
26 // SECURITY SOLUTIONS
014-033_SSM109 Regulars.indd 26
Let’s assume that Callum has assessed his own personal
While this strategy is limited, it can
Giving some thought to those things now, will greatly assist Callum – and his business – in the long run. n
securitysolutionsmagazine.com
21/08/2017 10:25 am
R
EasyIP 3.0 H.265+ EasyIP 3.0 H.265+
EasyIP 3.0 SERIES
Simple and Powerful The Easier Journey toEasyIP Better 3.0Security SERIES Simple and Powerful The Easier Journey to Better Security
The all-new Easy IP product range is simple to install and use, and is available at a budget-friendly price. Rarely does an affordable system come with such powerful functionality: 4K ultra HD with true WDR, H.265+ Smart Codec compression technology. New cameras in the range also provide greater analytic functions, featuring on-board Video Content Analysis options. Its power, combined with its easy installation and user-friendliness, means the Easy IP 3.0 solution requires significantly less operator input to deliver a significantly more efficient and effective security solution. - 4K Ultra HD with WDRrange is simple to install and use, and is available at a budget-friendly price. The all-new Easy IP true product Rarely does an affordable system come with such powerful functionality: 4K ultra HD with true WDR, H.265+ - H.265+/H.265 Compression technology Smart Codec compression technology. New cameras in the range also provide greater analytic functions, featuring on-board Video Content Analysis options. Its power, combined with its easy installation and Hikvision Oceania user-friendliness, means the Easy IP 3.0 solution requires significantly less operator input to deliver a significantly more efficient effective security solution. Unite 14a Eden Park Dr, Macquarie Parkand NSW 2113 Tel: +61 2 8599 4233 - 4K HD557 with true WDR Toll Ultra Free:1300 450( Australia only) Email:salesau@hikvision.com www.hikvision.com - H.265+/H.265 Compression technology 014-033_SSM109 Regulars.indd 27
Hikvision Oceania
21/08/2017 10:25 am
THINKING ABOUT SECURITY
RED TEAMS / TOO CLOSE TO SEE I
s it possible to be too
How can we find out if we
C
M
The client needs to clearly
possibly to assets and functions
Y
close to something?
have become blind or, at the least,
define how far the Red Team may
that have not been identified or
CM
To be so familiar with
blinkered? Two options present
go, are they allowed to conduct
considered.
the situation that the
themselves.
Social Engineering against staff?
view has become ordinary? I once
One option is to do another
MY
Obviously, it is essential
Can they cut fences or pop doors?
to ensure confidentiality
CY
asked the then security manager of
security risk review – this time
It is also necessary to remind the
is maintained and that the
Sydney Opera House, as we stepped
from first principles, putting
team that they are not to break any
weaknesses are only reported to
out onto the forecourt with the sun
previous assessments aside and
laws but can report on how illegal
those who need to know.
sparkling off the wakes of the
starting from absolute scratch. If
means could be used.
ferries, the Bridge towering off to
done objectively and as if for a new
one side and the Botanic Gardens
business it should produce, if not
vectors and motives and ensure
that dealt with sensitive corporate
lush on the other, if they ever forgot
a different range of security risks,
they are realistic and relevant in
data and had processes in place
where they worked. The answer was
at least an honest review of assets,
relation to the organisation. There
to manage and control the flow
“yes, sometimes”.
threats, risks and outcomes. As
has been a tendency to “Blue Sky”
of information, but had failed to
the potential for self-propagating
threat vectors and thereby include
notice that they employed foreign
become so familiar with our work
sameness will exist, perhaps the
all sorts of unrealistic scenarios.
nationals from countries that
environment, with normal business
use of an external consultant
Consideration should be given
were direct competitors. While
and the ‘usual suspects’ that we
to conduct an enterprise-level
to what is ‘probable’ rather than
there was no obvious evidence
can fail to see what has changed
security risk assessment, without
‘possible’.
of corporate espionage, the
or what has always been there and
access to the previous reports,
never noticed.
may assist.
It is the same with our risks. We
Managers all talk about
The second option is to
Discuss the possible attack
A ‘first principles’ review can help establish a new or revised baseline for security. However, it
CMY
One example where this was of benefit was an organisation
possibility certainly existed with great potential cost. We need to step back and
foreseeable risks; but foreseeable
have outsiders test the validity
can still be biased by corporate
see both the beauty and terror
to whom? What if we are so
of the existing risk mitigation
prejudices and blind spots. A Red
of the wider view and remember
comfortable that we don’t see the
methodologies. The use of a “Red
Team review, if appropriately
where we work.
things around us that others do,
Team”. However, care must be
managed and controlled without
particularly those in the future
taken when considering having an
inflicting ‘known wisdom’ on the
is a recognised thought leader
sitting in a court room who have had
external agency deliberately try to
external assessors, can provide a
in the field of security. He can
time to prepare with the advantage
identify and prosecute holes in the
valuable and relevant snapshot
be contacted at donwilliams@
of hindsight?
security structure.
of exposures and vulnerabilities,
dswconsulting.com.au. n
28 // SECURITY SOLUTIONS
014-033_SSM109 Regulars.indd 28
K
Don Williams CPP RSecP ASecM
securitysolutionsmagazine.com
21/08/2017 10:25 am
NEW INT-QUADIP For PB- Series Quad Beams
C
M
Y
CM
MY
CY
CMY
K
IP INTERFACE MODULE
LAN/WAN
With the new IP interface module, our intelligent PB- series Quad Beams are as easy as IP cameras to install and integrate with leading VMS solutions.
VMS
Most intruder detection systems rely on legacy technologies which require a number of third-party products and man-hours to install. The INT-QUADIP module utilises infrastructures already in place with CCTV, Access Control, and other security systems; dramatically reducing installation costs whilst providing a fully integrated security system which can be easily expanded and configured as desired.
KEY SPECIFICATIONS ● ● ● ●
PoE Class 3 IEEE 802.3af VMS Compatible Direct control for cameras including: - Axis - Bosch - Hikvision - Sony
● Plug & play web browser interface ● No software installation required ● One cable installation
PB-IN-HF/HFA The ultimate in trouble free perimeter detection for distances up to 200m.
1300 366 851 www.seadan.com.au 014-033_SSM109 Regulars.indd 29
PB-F/FA Single channel quad beams ideal for simple perimeter systems.
PB-IN-100AT Anti-crawl beam for high security perimeters up to 100m.
PB-KH TAKEX quad beam performance for use in beam towers.
(02) 9427 2677 www.sprintintercom.au
21/08/2017 10:25 am
EVENTS
Integrate
offers industry certification and
is invitation only and intended for
This conference will provide
29–31 August 2017
training with tailored programs
Australia’s most senior IT leaders
CISO professionals with a unique
Melbourne Convention and
from InfoComm International
to gather for a strategic event in
opportunity to learn and interact
Exhibition Centre
and CEDIA.
order to exchange knowledge
with their peers through a series of
and interact as one over a range
professionally-led sessions hosted
Now entering its ninth year,
• Experience – Integrate is your
Integrate is Australia’s premier AV
opportunity to interact and
of important issues facing the
by both international and local
and Integration trade show. The
test the latest cutting-edge
industry. The one-to-one meetings
experts, allowing all attendees the
event is a hub of activity for local
innovations in the industry and
with leading supplier companies
opportunity to be informed by front
and global brands to showcase
talk to the specialists behind
will also provide a wealth of
line executives while also having
solutions and products to AV
these leading products.
knowledge and offer opportunities
the opportunity to engage with
for all attending delegates, while
a unique group of key suppliers
technicians and corporate end-
• Network – As the leading AV
users, meet with buyers, integrators
event in the Australasia region,
the informal networking sessions
through targeted pre-arranged
and distributors, and celebrate the
with visitors and suppliers
promise to create a unique
meeting sessions.
latest industry developments.
coming from all corners of
interactive forum.
• Explore – With over 130
the globe. Integrate offers
exhibitors showcasing their
an unrivaled networking
latest products and services in
opportunity for the industry to
AV and solution technology, you
meet annually and exchange
are going to wish you had more
news and insights.
Visit cioleadersaustralia.com for
Visit cisoleaders.com.au for more information.
more information.
CISO Leaders Australia Summit
ASIS International Australia Conference Contemporary Security Leadership
than three days to explore the
Visit integrate-expo.com for more
7 September 2017
In Australia
Integrate show floor!
information.
Sydney, Australia
19 October 2017
The CISO Leaders Summit Australia
Melbourne Convention and
will highlight the emerging
Exhibition Centre
speakers, global brands and
CIO Leaders Summit Australia 2017
technologies that are leading the
The ASIS International Australia
product specialists as they share
6 September 2017
way and will examine current
Conference 2017 is the premier
their insight into the latest in
Sydney, Australia
challenges that CISOs are faced
gathering of security professionals.
AV technology. Integrate also
The CIO Leaders Summit Australia
with throughout 2017 and beyond.
The conference provides an
• Learn – Learn from internationally renowned
30 // SECURITY SOLUTIONS
014-033_SSM109 Regulars.indd 30
securitysolutionsmagazine.com
21/08/2017 10:25 am
dorma
Co m
es Sec at ee th urit st e yE xpo and H futur e , fo 2 r yo 2, ur cha nce
WI aG
oP
ro V
ide
N
to
oC am
era
The c-lever range -The perfect symbiosis of technology and design. Since the launch of the smartphone, it’s been clear that intelligent secure technology and design are not mutually exclusive.
Come see the future
Our designers have taken inspiration from such developments and created shapes that stylishly combine aesthetic and functional secure requirements. Come visit stand H22 at the Security Exhibition & Conference to learn more about our c-lever range and our security solutions to meet your business requirements.
1800 675 411 www.dormakaba.com.au
dormakaba_c-lever x 275mm_SS#107_108_240517.indd 2 014-033_SSM109air_210mm Regulars.indd 31
6/2/2017 9:21:54 AMam 21/08/2017 10:25
EVENTS established platform for education
suppliers, to be recognised and for
and business exchange, addressing
their success to be celebrated.
the key trends and issues facing
The criteria for these awards
• Connected Security Expo (CSE) moved to the ISC West show floor in 2017! As the digital
• bring new and leading solutions in operational efficiency to the market
security professionals locally
are based on extensive research
and physical worlds collide, it
and globally.
on key factors that contribute
is increasingly important for
Key topics:
to and characterise outstanding
industry professionals to protect
• terrorism
performance. This research can be
their organisations and clients
• cybersecurity
found at https://perpetuityresearch.
from both physical and cyber
multidisciplinary professions
• behavioural techniques
com/wp-content/uploads/2014/09/
threats. CSE provides holistic
to have a voice and achieve
• security management
Aspiring-to-Excellence.pdf
solutions for today’s connected
• emergency management.
The OSPAs are being set-up
organisations.
• deliver forefront trends for running more sustainable facilities and workplaces • foster a community of
recognition • redefine the future of the
in collaboration with security
Working with SIA, ISC West also
industry and challenge
The conference is a great
associations and groups across
features world-class education
traditional perceptions of
opportunity to:
many countries.
to learn about every facet of the
• engage with peers and
By researching and
colleagues from the public and
standardising the award categories
private sectors
and criteria, the OSPAs scheme
security industry. Visit www.iscwest.com for more
facility management. Visit www.totalfacilities.com.au for more information.
information.
accelerating the future of the
countries to run their own
Total Facilities
Security Exhibition & Conference 2018
security profession.
evidence-based OSPAs schemes
18–19 April 2018
25–27 July 2018
while maintaining an ability to
Melbourne Convention and
Melbourne Convention and
Who should attend the event:
compete on an international level
Exhibition Centre, Melbourne
Exhibition Centre, Melbourne
• security professionals across the
in the future – World OSPAs.
Returning to Melbourne with an
In 2018, the Security Exhibition
exciting new proposition, Total
& Conference is heading back to
more information or to make a
Facilities now unites both facilities
Melbourne.
nomination.
and workplace professionals in the
• join industry leaders
public and private sectors • security risk management professionals
provides an opportunity for
Visit au.theospas.com for
• security service providers • security consultants
ISC West
• government and law
11–13 April 2018
The Security Exhibition &
ultimate industry destination for
Conference is the industry’s annual
the built and work environment.
opportunity to reunite for three days
Held annually between Sydney
of quality networking and unrivalled
Sands Expo Convention
and Melbourne, TFX is Australia’s
education alongside a showcase of
Contact events@asisvictoria.org.au
Center, Las Vegas
largest learning and networking
the most innovative solutions to the
or visit www.asisvictoria.org.au for
ISC West is the largest security
event for facilities and workplace
Australian market. For over three
more information.
industry trade show in the US.
management professions seeking
decades, it has been the largest and
At ISC West you will have the
solutions for creating more efficient,
most established commercial event
The 2017 Australian OSPAs
chance to meet with technical
sustainable and productive facilities
for the security industry in Australia,
representatives from 1,000+
and workplaces.
bringing together the entire supply
19 October 2017
exhibitors and brands in the
The River Room
security industry and network with
and efficient in its delivery
security professionals and end-users
Crown Casino, Melbourne
over 28,000 security professionals.
and provides real solutions to
to connect and create unparalleled
The Outstanding Security
In 2018, ISC West will offer
everyday operational challenges
business opportunities.
enforcement professionals.
Total Facilities is comprehensive
chain of manufacturers, distributors,
Performance Awards (OSPAs) are
attendees a host of attractions,
by connecting buyers and sellers to
pleased to announce the dates
including:
source innovation, debate current
forward to once again reuniting more
for the 2017 Australian awards.
• New products and technologies,
The entire team is looking
issues, share insights and create
than 4,500 security professionals
They will be working for the third
encompassing everything
opportunities for an invaluable
with over 150 leading suppliers.
year in a row with the prestigious
from access control to
community of professionals.
The 2018 show is set to see some
Australian Security Industry
unmanned vehicles.
Association Limited (ASIAL). The OSPAs recognise and
• Unmanned Security Expo,
interesting new innovations as well Our vision
as a host of new attractions.
introduced in 2017, is an event
We champion professionals
reward companies and individuals
within ISC West focusing on
who support the built and work
your diary. We look forward to seeing
across the security sector. They are
unmanned aerial vehicles
environment with a sense of
you again in Melbourne in 2018
designed to be both independent
(UAVs), unmanned ground
belonging and advocacy – the
for the Security Exhibition & ASIAL
and inclusive, providing an
robotics and vehicles (UGVs),
unsung heroes and behind-the-
Conference!
opportunity for outstanding
and the various software and
scenes forces. We will evolve and
performers, whether buyers or
applications that support them.
grow our offer year-on-year to:
32 // SECURITY SOLUTIONS
014-033_SSM109 Regulars.indd 32
Make sure you put the dates in
Visit securityexpo.com.au for more information. n
securitysolutionsmagazine.com
21/08/2017 10:25 am
Recognize and Analyze How often was he here this month?
Is he a known suspect?
How old is she?
Are they employees?
When, where did she enter?
Is this valued customer Mia Clark?
How many people are here? Is it too crowded in this area? New: Recorded media import and advanced investigation tools upload sets of videos recorded at a specific location and time to track possible participants in a crime find a person enrolled in an image database or search for an unknown person locate appearances in multiple videos make use of filters that specify timeframe, camera location, age range, gender and glasses
See it in action at Security Expo in Sydney, stand K26! 014-033_SSM109 Regulars.indd 33
21/08/2017 10:25 am
FEATURE
CISO On The Rise But Many Organisations Still Lacking Adequate Cybersecurity
34 // SECURITY SOLUTIONS
034-037_SSM109 Article 1.indd 34
securitysolutionsmagazine.com
21/08/2017 4:53 pm
BY JO STEWART-RATTRAY
securitysolutionsmagazine.com
034-037_SSM109 Article 1.indd 35
In my discussions with colleagues
According to ISACA’s State of
and peers, it is pleasing to see
Cyber Security 2017 research,
the importance of cybersecurity
65 percent of organisations
awareness is growing among
now have a dedicated chief
business leaders and board
information security officer (CISO)
directors. Unfortunately, this
on staff. This is a 15 percent
awareness and understanding of
increase compared to last year.
cyber threats has come at a price,
Additionally, a recent study by The
as the recent WannaCry and Petya
Australian Computer Society and
ransomware attacks demonstrate
Deloitte Access Economics predicts
how vulnerable and unprepared
information and communications
many organisations remain.
technologies (ICT) management
SECURITY SOLUTIONS // 35
21/08/2017 4:53 pm
FEATURE
and operations roles will grow
executed their
in Australia by 2.4 percent per
incident response plan
annum, with ICT technical and
having their wallets stolen,
• 53 percent report an increase
professional workers growing at
in the year-over-year
1.9 percent per annum.
number of attacks.
However, the ISACA research
To take another example, consumers used to worry about
Stagnant or reduced budgets could
also showed that, while
lead to an inability to keep up with
cybersecurity budgets have
the growing threat landscape,
expanded, the rate of growth is
especially considering many
slowing. Only half of the survey
enterprises are still experiencing
respondents anticipated growth
a shortage of skilled cybersecurity
in their budget – down 11 percent
professionals. This may result in
compared to the previous year.
CISOs having less budget available
This decreased growth comes
to prevent and respond to attacks.
at a time when cyber threats are increasing and becoming
Data is the New Black
more sophisticated. As the
At the turn of the century, the
research highlights:
mantra for businesses was
• 80 percent of security
‘knowledge is power’. As the
resulting in loss of money and
HOWEVER, THE ISACA RESEARCH ALSO SHOWED THAT, WHILE CYBERSECURITY BUDGETS HAVE EXPANDED, THE RATE OF GROWTH IS SLOWING.
credit cards. Today, with credit card companies having systems in place to immediately deal with theft, while still an annoying and time-consuming process, consumers are more concerned about the theft of a mobile. This results in a higher value loss – the loss of personal information, such as contacts and photos, and sensitive financial and business-related data. Thankfully, with businesses addressing mobile security and encryption, this threat is
leaders believe their
knowledge economy continues
decreasing rapidly. Now, hackers
enterprise will experience a
to evolve, data is now a currency
see a viable opportunity in the
cyberattack this year
being traded on the darknet like
emergence of the Internet of
commodities on the stock market.
Things (IoT). IoT has overtaken
• 50 percent of enterprises
36 // SECURITY SOLUTIONS
034-037_SSM109 Article 1.indd 36
securitysolutionsmagazine.com
21/08/2017 4:53 pm
mobile as a primary focus for cyber defences, as 97 percent of organisations see a rise in its usage. The rise of sophisticated
STAGNANT OR REDUCED BUDGETS COULD LEAD TO AN INABILITY TO KEEP UP WITH THE GROWING THREAT LANDSCAPE, ESPECIALLY CONSIDERING MANY ENTERPRISES ARE STILL EXPERIENCING A SHORTAGE OF SKILLED CYBERSECURITY PROFESSIONALS.
What can Businesses do to Protect Data?
a significant and concerning
1. Information sharing is
organisation faces and its
gap between the threats an
paramount. Enterprises
readiness to address those
must consider expanding
threats in a timely or effective
participation in information
manner. Cybersecurity
sharing and collaborative-
professionals face huge demands
analysis venues. Both better
to secure organisational
dissemination of what is
infrastructure, and teams
known and better intelligence
need to be properly trained,
gathering so that more is
resourced and prepared.”
known is needed to ensure
Enterprises should begin
that organisations are as well
planning strategies now
connected to information
to ensure that they are
on the latest threats as their
prepared by investing in talent
adversaries are.
retention, professional growth
2. Build and maintain a strong
opportunities, cross-training and
cybersecurity workforce.
other activities that maximise
Security professionals must
current staff and minimise the
not only be trained, but have
impact of attrition. The future
their skills maintained using
viability of their organisations
hands-on technical training
could well depend on it.
and performance-based assessment, which is why
Jo Stewart-Rattray has
this year ISACA developed
over 25 years’ experience in
the Cybersecurity Nexus
the IT industry. She specialises
(CSX)™ Training Platform.
in consulting in information
And this must be done while
security issues, with a particular
also assuring that these
emphasis on governance in both
professionals understand the
the commercial and operational
nature of the businesses for
areas of businesses. Jo provides
which they work.
strategic advice to organisations
3. Provide cybersecurity the
across a number of industry
resources required. Sixteen
sectors, including banking and
percent of survey respondents
finance, utilities, automotive
stated they do not have an
manufacturing, tertiary education,
incident response plan, and
retail and government. Jo heads
motivation of attackers is most
one in four organisations
ISACA’s Connecting Women
likely to be financial gain, and
have training budgets of less
Leaders in Technology and chairs
recent research from IBM showed
than US$1,000 (A$1330) per
the Branch Executive Committee of
most organisations pay the ransom.
cybersecurity team member.
the Australian Computer Society.
Financial motivations by hackers
Companies still do not have
She is also past chair of ISACA’s
are likely to spur the development
the skills they need or the
Audit Committee, Leadership
of increasingly sophisticated
plans in place to prepare for
Development Committee and
ransomware in the future. This
advanced cyber threats. These
Security Management Committee.
may mean an uptick in the amount
things take resources.
ransomware further illustrates that data is now a currency. Half of respondents indicated that the
This article is an extract of
of malware and its complexity.
My colleague, Christos
the ISACA State of Cyber Security
Just as credit card companies have
Dimitriadis, Ph.D., CISA, CISM,
2017, Part 2: Current Trends in
systems and processes in place
past ISACA board chair and
the Threat Landscape. The full
to deal with theft, enterprises
group head of information
report can be read at: https://
need to treat data like money and
security at INTRALOT,
cybersecurity.isaca.org/state-
protect it vigorously.
commented recently, “There is
of-cybersecurity n
securitysolutionsmagazine.com
034-037_SSM109 Article 1.indd 37
SECURITY SOLUTIONS // 37
21/08/2017 4:53 pm
ALARMS
38 // SECURITY SOLUTIONS
038-041_SSM109 Alarms.indd 38
securitysolutionsmagazine.com
21/08/2017 10:22 am
Taking place at the new
evident, not just from the increase
Awards”, sponsored by Sony.
NVR5224-24P-4KS2, a 24 Channel
International Convention Centre
in visitor numbers, but also the
These awards are a celebration
NVR capable of transmitting over
Sydney, from 26 to 28 July, the
look of the show. This year’s event
of the most innovative products
cable distances of up to 800m
32nd annual Security Conference
saw exhibitors invest more than
to hit the Australian market in
between the camera and NVR, a
and Exhibition returned to Sydney
ever before in their stands, with
the last 12 months. This year’s
huge increase in distance when
after a three-year absence and the
Inner Range producing one of
competition included around
compared to the current 100m
atmosphere was electric.
the most impressive stands ever
50 entries. Products were
limitation experienced across
seen at the show. Awards for this
judged on originality, impact
most traditional IP networks.
attendance, including the return
year’s exhibitors went to Ness
of innovation, measurability of
of some big name brands such as
Corporation, who were awarded
the benefits, and applicability
awarded to Avigilon for their
FLIR Systems, HID Global, Inner
Best Custom Stand over 36sqm,
to the Australian market by a
Appearance Search™ technology,
Range, Dahua, HIK Vision, Bosch,
Alarm.com, who won Best Custom
panel of leading security experts
a sophisticated deep learning
and so on, this year’s event was
Stand under 36sqm and Sententia,
including General Manager of
artificial intelligence (AI) search
the largest yet. Over three days,
won the Best Shell Scheme Stand
ASIAL, John Fleming and Editor of
engine technology. Appearance
more than 5000 visitors attended
with their team dressed up as the
Security Solutions Magazine, John
Search™ sorts through hours of
the show, an increase of 14% on
Cyber Security A-Team!
Bigelow among others.
footage with ease, to quickly locate
With 153 exhibitors in
visitor numbers for 2016 and
The 2017 show also saw the
Dahua Technology, one of
First Runner Up was
specific people and vehicles across
13% more than attended the last
release of an amazing array of
the world’s largest providers of
Sydney show back in 2013.
new products and technologies
video surveillance products and
Second Runner Up
as highlighted by the “2017
services, took out this year’s Best
was awarded to Amaryllo
Security Best New Products
New Product Award for the Dahua
International’s ATOM AR3S, the
The growth in both size and popularity of the show was
securitysolutionsmagazine.com
038-041_SSM109 Alarms.indd 39
an entire site.
SECURITY SOLUTIONS // 39
21/08/2017 10:22 am
ALARMS
W i I a s
A m o a r i
T a e t s
A c m o
world’s first professional IP66
at Doltone House in Sydney’s
a diverse range of topics
Security Solutions at Telstra;
certified outdoor robot camera.
Jones Bay Wharf as part of the
shaping the current security
Assistant Commissioner Mark
The ATOM AR3S recognises faces
annual Security Gala Dinner.
landscape including cyber
Murdoch, Commander Counter
as well as deciphering military-
The dinner runs alongside the
security, crisis management,
Terrorism & Special Tactics at
grade 256-bit encryption. The
Security Exhibition & Conference
terror preparedness, the
NSW Police; and Shara Evans,
AR3S is also fast to set up as it
and was attended by over 400
Commonwealth Games security,
Founder at Market Clarity.
can be powered from a standard
industry professionals.
supply chain management
Edison light bulb socket. The standard of entries for this
Running in conjunction with the exhibition, this year’s
Next year’s event will return to
and security risk management
Melbourne, taking place from the
to name a few.
25–27 July 2018 at the Melbourne
year’s awards was second to none,
ASIAL Security Conference and
making the judging decisions
Executive Briefing program
industry experts such as Danny
Those people wanting more
harder than ever with a special
was completely sold out. The
Baade, Head of Security at Gold
information, looking to book
mention going out to all entries.
program brought together
Coast 2018 Commonwealth
space or attend the conference
The awards were announced on
local and international thought
Games Corporation; Neil
program can visit
the evening of Thursday 27 July
leaders who addressed
Campbell, Director of Global
www.securityexpo.com.au n
40 // SECURITY SOLUTIONS
038-041_SSM109 Alarms.indd 40
Among those speaking were
Convention & Exhibition Centre.
securitysolutionsmagazine.com
21/08/2017 10:22 am
W n R a b
A fu t d
We are a leading player in the biometric identification market by pioneering In Motion Identification (IMID) access, a multimodal verification for instant, seamless, and non-invasive verification. Ask us about advanced features such as multi-modality, speed of identification, our committed accuracy, anti-fraud algorithm, double factor availability, restricted people alerts, simultaneous identification.
The solution is designed for enterprise and can be easily integrated with existing infrastructure. It can be added to any existing door, turnstile or speed stile, and any access control solution. Ask us about high availability, scalability, cyber security and encryption, multi-site management, traceability and auditability, our APIs and ease of integration.
FST Biometrics is a leading identity management solutions provider. The company’s IMID™ product line offers access control through its proprietary In Motion Identification technology. This provides the ultimate security and convenience for users, who are accurately identified without having to stop or slow down. IMID™ solutions integrate a fusion of biometric and analytic technologies that include face recognition, body behavior analytics and voice verification. For more information, please visit http://www.fstbm.com.
With IMID Access, authorized users do not have to slow down, sign in or stop. Rather, they are identified in motion, and granted seamless access to buildings and facilities. Ask us about our rich out of the box functionality, such as visitor management, time attendance, notifications, digital doorman and mobile applications.
038-041_SSM109 Alarms.indd 41
Add-On APAC Innovative Solutions offers converged physical, cyber and communication security solutions. Operating across the Asia Pacific region, we harness advanced products and ground-breaking technologies, helping our customers transform the way they protect people, information and assets. Learn more about us at http://www.addonapac.com. Add-On APAC Australia Pty Ltd info@addonapac.com, 03 9607 8465
IMID is the future of access control. Prefer to take your own conclusions?
Ask us for a product demonstration, and see it for yourself.
21/08/2017 10:22 am
OPERATIONS
P R I M A 42 // SECURITY SOLUTIONS
042-047_SSM109 Operations.indd 42
securitysolutionsmagazine.com
21/08/2017 10:23 am
L F E A R Key Considerations For Operational Survival BY RICHARD KAY
Fear is a feeling induced by
or in anticipation or expectation of
emotions, with fear one of them,
responses, so it has been preserved
perceived danger or threat
a future threat perceived as a risk
but which also includes acute
throughout evolution.
that occurs in certain types of
to body or life. The fear response
stress reaction, anger, angst,
organisms, which causes a change
arises from the perception of
anxiety, fright, horror, joy, panic
danger; if people did not feel it, they
in metabolic and organ functions
danger leading to confrontation
and sadness. Fear is related to,
could not protect themselves from
and ultimately a change in
with, or escape/avoidance (fight-or-
but should be distinguished from,
legitimate threats. But often people
behaviour, such as fleeing, hiding or
flight response), which in extreme
anxiety, which occurs as the result
fear situations that are far from life
freezing from perceived traumatic
cases of fear (terror) can be a freeze
of threats that are perceived to be
or death, and thus hang back for
events. Fear in human beings may
response or paralysis.
uncontrollable or unavoidable. The
no good reason. In humans and
fear response serves survival by
animals, fear is modulated by the
generating appropriate behavioural
process of cognition and learning.
occur in response to a specific stimulus occurring in the present,
securitysolutionsmagazine.com
042-047_SSM109 Operations.indd 43
Psychologists suggest that there is only a small set of innate
Fear is a vital response to
SECURITY SOLUTIONS // 43
21/08/2017 10:23 am
OPERATIONS Thus fear is judged as rational
humans that were quick to fear
Fear in violent confrontations can
experiences necessary to ensure
or appropriate and irrational or
dangerous situations were more
take many forms:
a high level of survivability, but
inappropriate. An irrational fear is
likely to survive and reproduce,
• fear of getting harmed or
things can take a negative turn if
called a phobia.
preparedness is a genetic effect
Fear of the unknown
that is the result of natural
harming others • fear of harm to fellow officers
trainees are given the experience of losing, even in simulated
(irrational fear) can be defined
selection. From an evolutionary
as false evidence appearing
perspective, different fears may
real and is caused by negative
be adaptations that have been
thinking which arises from
useful in an evolutionary past.
anxiety, and it can branch out
Some fears, such as fear of heights,
to many areas. Being scared
may be common to all mammals.
makes people anticipate and
Other fears, such as fear of snakes,
aggravate of what may lie ahead
may be common to all simians.
These fears can exist
There are four levels of
rather than plan and evaluate.
Still others, such as fear of mice
simultaneously, clouding the
physiological performance.
The ambiguity of situations
and insects, may be unique to
focus of what needs to be
There is no specific heart rate
that tend to be uncertain and
humans. Fear is high only if the
accomplished. When dealing
associated with Condition White
unpredictable can cause anxiety
observed risk and seriousness
with violent confrontations,
and Yellow; the difference is more
and other psychological and
both are high, and is low if risk or
officers do not need these mental
psychological than physiological.
physical problems, especially in
seriousness is low.
distractions to cloud their
However, as the level of arousal
judgement and cause hesitation.
increases, the ‘conditions’ can
those who engage it constantly.
or bystanders • fear of legal litigation or procedural inquiry
encounters. It also creates neurological deficiency that can be difficult to overcome.
• fear of judgement after the fact • fear of issues relating to religious beliefs.
Consequences on Operational Performance
Ambiguous and mixed messages
Signs and Symptoms
can affect self-esteem and self-
Many physiological changes in
in four main ways – those who
rate levels.
confidence. Developing a sense
the body are associated with
have no fear (no time, caught by
• Condition White is the lowest
of equanimity to handle various
fear. An innate response for
surprise) and do the job, those
level of readiness, unfocused,
situations is often advocated as an
coping with danger, it works by:
who have fear and no one knows
unprepared, helpless and
antidote to irrational fear and is
accelerating the breathing rate
it and they do the job, those who
an essential skill.
(hyperventilation) and heart
have fear and everyone knows
Fear manifests itself in people
be associated with specific heart
vulnerable and in denial. • Condition Yellow is the
rate; constricting the peripheral
it, but it does not matter because
level of basic alertness and
as a result of learning, called fear
blood vessels, leading to blushing
they do the job, and those who
readiness, psychologically
conditioning in psychology. Fear
and vasodilation of the central
have fear and everyone knows it
can be learned by experiencing
vessels (pooling); increasing
because they failed to do the job.
or watching a traumatic accident.
muscle tension, including the
Humans usually vacillate between
optimal survival and combat
There are studies looking at areas
muscles attached to each hair
all four stages, with a propensity
performance (115–145bpm),
of the brain that are affected in
follicle to contract and causing
towards one or another.
where complex motor skills,
relation to fear. When looking at
goose bumps (piloerection) to
these areas, such as the amygdala,
make a cold person warmer or
is stress inoculation training,
cognitive reaction time are
it was proposed that people learn
a frightened animal look more
which places an obvious fork in
all at their peak, but there is
to fear regardless of whether they
impressive; sweating; increasing
a person’s survival psychology
a price – at about 115bpm,
themselves have experienced
blood glucose; increasing serum
pathway at the point of ‘harm’.
fine-motor skills begin to
trauma, or if they have observed
calcium; increasing white
If officers are conditioned to
the fear in others. Fear is also
blood cells called neutrophilic
stop when they are harmed,
affected by cultural and historical
leukocytes; heightening alertness,
they program an undesirable
accelerated heart rate levels
context. There are consistent
leading to sleep disturbance; and
and potentially self-destructive
(145–175bpm). For most
cross-cultural differences in how
creating a feeling of ‘butterflies’
action into their mind. Giving
officers, 145bpm represents
people respond to fear. Display
in the stomach (dyspepsia).
officers the experience of losing
a level at which performance
rules affect how likely people are
This primitive mechanism
in a simulation actually begins to
begins to break down, but
to show the facial expression of
may help an organism survive
condition a risk-aversion pathway
for some this is the optimal
fear and other emotions.
by either running away or
in the brain to which they may
level of arousal, enabling
fighting the danger. With the
turn during similar experiences
extraordinary performance,
learned, the capacity to fear is
series of physiological changes,
in the future – they may actually
a process called stress
part of human nature. Studies
the consciousness realises an
stop and give up as they were
have found that certain fears
emotion of fear.
programmed to do in training.
People develop specific fears
Although many fears are
In violent confrontations,
The key to managing fear
prepared for combat. • Condition Red is the level of
visual reaction time and
deteriorate. • Condition Grey exists at
acclimatisation. • Condition Black is when the
When properly structured,
sympathetic nervous system
– a phenomenon known as
everyone feels fear to some
reality-based training can provide
arousal induces a heart rate
preparedness. Because early
degree, even experienced officers.
officers with those essential
above 175bpm, and cognitive
are more common than others
44 // SECURITY SOLUTIONS
042-047_SSM109 Operations.indd 44
securitysolutionsmagazine.com
21/08/2017 10:23 am
Effects of FearInduced Heart Rate Increase (bpm)
adrenaline has been introduced
includes preparation for the
into the system, the resulting
possibility of being shot at and
startle response contraction (of
preparation for the possibility
There is a tremendous difference
For those who do not push
the hands) can generate as much
of being hit. It is about being
between the performance impact
the envelope through physical
as 25lbs of pressure. That amount
prepared ahead of time for
of heart rate increase from fear
fitness and repetitive training,
of force is approximately twice
operational reality.
and heart rate increase from
Condition Grey is generally a
the amount needed to discharge a
physical exercise. This data is
realm in which complex motor
double action handgun.
for hormonal induced heart
skills begin to break down and
rate increases resulting from
bilateral symmetry begins to set
to prevent this convulsive clutch
can act. The best equipment
sympathetic nervous system
in, meaning that what an officer
response. One is to keep the
and training in the world
arousal. Exercise-induced
does with one hand he is likely to
finger off the trigger until it
cannot make up for the officer
increases do not have the same
do with the other.
is time to engage the target, a
unprepared to use available
technique that has become the
assets. Officers must mentally
processing deteriorates as the midbrain takes over from the forebrain.
effect. Hormonal-induced
Bilateral symmetry can have
There are many safeguards
Mental conditioning is extremely important. The brain must decide before the body
performance and strength
grave consequences for an officer
standard for firearm training.
prepare themselves to deal
increases can achieve 100 percent
in a tense situation where he is
Even that is not a guarantee,
with any situation at any time.
of potential maximum within 10
holding a firearm on a subject.
since the clutch response can
A poor survival mindset leads
seconds, but drop 55 percent after
Say the subject attempts to flee
sometimes be so intense that
to indecisiveness that can
30 seconds, 35 percent after 60
and the officer grabs him with
the finger will slip back into
jeopardise all parties involved.
seconds and 31 percent after 90
his free hand. The accelerated
the trigger guard causing an
A strong survival mindset
seconds. It takes three minutes
heartbeat causes bilateral
unintentional discharge. Another
helps instil the confidence and
of rest to ‘recharge’ the system.
symmetry, so that as the officer
safeguard is to ensure muzzle
commitment necessary to survive
Any extended period of relaxation
grabs a fistful of the subject’s
discipline. The best safeguard,
and prevail.
after intense sympathetic nervous
shirt with his support hand, he
however, is for an officer to not
system arousal can result in a
has a convulsive clutch response
allow his heart rate to get too
occasion in operations; they sink
parasympathetic backlash, with
in his dominant hand, which may
high. Calm people are much less
to the level of their training.
significant drops in energy level,
cause an unintentional discharge
likely to make these kinds of
Whatever is drilled in training
heart rate and blood pressure.
of the weapon. Bilateral
mistakes. To remain calm, and
comes out the other end in
This can manifest itself as
symmetry can also happen when
control heart rate, officers should
operations. There must be a
normal shock symptoms and/or
a person is startled. If a person
engage in tactical breathing.
continual effort to develop
profound exhaustion.
is under extreme stress and
One tool to control
Officers do not rise to the
realistic simulations training so
physiological response is
that officers develop skill sets
autogenic breathing, a technique
that transfer to reality. Everyone
that can be used in a stressful
has good and bad days. Do not
situation to control sympathetic
let officers destroy themselves
nervous system reactions. The
because of a bad day, and do not
more an officer practises it, the
destroy others because they had
quicker the effects kick in. It
a bad one. Take pride in the good
can be used before, during and
days and strive to constantly
after a combat situation. When
improve. While it is acceptable to
used before, it quickly calms and
have a bad day, it is unacceptable
prepares an officer to function at
not to train and improve and to
his best in a hostile environment.
not use available resources to
After a critical incident, it is
make sure that the bad day never
a highly effective tool to help
happens again.
delink the physiological arousal from the memory of the event.
internationally certified tactical
it, he should keep tuning it
instructor-trainer, director
until he gets to the level that
and senior trainer of Modern
works for him.
Combatives, a provider of
Statistics show that over a
securitysolutionsmagazine.com
042-047_SSM109 Operations.indd 45
Richard Kay is an
Once an officer starts using
operational safety training for the
third of all officers killed on
public safety sector. Visit www.
duty did not defend themselves.
moderncombatives.com.au for
The solution lies in training that
more information. n
SECURITY SOLUTIONS // 45
21/08/2017 10:23 am
CCTV
46 // SECURITY SOLUTIONS
046-049_SSM109 CCTV B.indd 46
securitysolutionsmagazine.com
21/08/2017 10:26 am
A REVOLUTION IN
VIDEO
A N A LY T I C S How Deep-Learning Makes Video Surveillance Smarter BY OLIVER PHILIPPOU, Senior Analyst, Video Surveillance, IHS Markit
Why is the security industry talking about artificial intelligence? • IHS Markit forecasts the total market for paid-for video analytics market will reach $700 million in 2021. • This growth attributed to the widespread adoption of emerging analytics technologies, specifically deep learning architectures, which promise to alter not just the video analytics landscape, but the video surveillance industry as a whole. • The 2017 edition of the IHS Markit Report on Video Analytics in Security and Business Intelligence is now available.
securitysolutionsmagazine.com
046-049_SSM109 CCTV B.indd 47
SECURITY SOLUTIONS // 47
21/08/2017 10:26 am
CCTV
World Market For Deep-Learning Video Analytics Software by Application Type in 2021
Security - 53% Safety - 13% Business Intelligence - 22% Traffic Management - 12%
For a video camera, the world
facilitate a significant leap in the
1) Accuracy
need an analytics solution that is
is not a straightforward place.
capabilities of video analytics.
A long held complaint levied
100 percent accurate 100 percent
It is a mirage of complex detail,
The last couple of years has seen
against traditional analytics
of the time, many user require
subtle nuances, and ever-changing
a large increase in research and
products was that these
a security system be as close to
scenes. As such, for years the
development in deep-learning
algorithms were unable to
infallible as possible. Users in
reliability of video analytics has
neural networks, proving
distinguish between objects
the critical infrastructure sector,
been extremely variable, with
their capabilities, generating
and behaviours that a human
for instance, cannot afford to
vendors struggling to develop
considerable excitement, and
being would have no problem
miss a breach in their security;
algorithms that could function
putting them within reach of a
classifying. This lack of intuition
and can spend a large amount of
in complex real world scenes.
much wider user group.
on the part of computer vision
money investigating false alarms.
algorithms results either in
Deep learning algorithms have
However, the industry has come a
Deep learning appears to be
long way in recent years, and the
able to offer a level of accuracy
missed security breaches or
proven their ability to learn to
traditional “rules-based” video
and reliability in object and
false alarms. The ability of deep
achieve 99.9 percent accuracy
analytics have steadily improved
behaviour classification, which
learning algorithms to view a
in certain tasks, in controlled
their capability. These analytics
not only enables video analytics
scene intuitively, in the same way
environments like airport
are still not quite able to cope with
to finally deliver on some of the
as a human viewer, means that
immigration face recognition
the detailed and complex world
lofty but as yet unrealised claims
detection accuracy increases, and
applications, where conventional
in which we live, particularly
made in the past, but pushes
false alarm rates fall, dramatically.
systems would struggle to achieve
when dealing with scenarios
capabilities far beyond them.
Neural networks allow a
95 percent (according to Paul Sun,
outside a highly controlled
Broadly speaking, there are two
computer to apply a series of
CEO, IronYun – Deep learning
environment. Enter ‘deep-learning
main areas in which deep learning
assessments to a given situation.
technology applications for video
analytics’. Deep-learning analytics
analytics offer significant benefits
This is a significant development
surveillance). In many security
are poised to revolutionise
over the technology that has
for the video analytics industry.
use cases, these few percentage
the security industry, and
preceded it. They are:
Although some end-users may not
points make all the difference.
48 // SECURITY SOLUTIONS
046-049_SSM109 CCTV B.indd 48
securitysolutionsmagazine.com
21/08/2017 10:26 am
with approximately one billion
to radically increase the
So what is driving adoption of video analytics based on deep learning?
effectiveness of a computer to
There are numerous factors
power with even faster iteration.
reliably classify objects and
that appear likely to drive the
The rapid development of
behaviour. It is also making
widespread adoption of deep
GPUs, supercomputers, and
possible the processing and
learning analytics across a variety
cloud computing and other
analysis of increasing volumes
of video surveillance application
high performance hardware
of video footage in a fraction of
types. One major factor is the
platforms has facilitated the rise
the time that previous analytics
astonishing volume of data
of deep-learning analytics.
would need. Companies such as
generated by video surveillance
Avigilon, Qognify, and IronYun
systems each day. Hundreds of
are becoming more and more
are now marketing analytics that
petabytes of video footage are
common. China’s safe city
leverage deep learning to turn
recorded daily, and this figure
initiatives have, for example,
vast amounts of video footage into
is rising all the time. This is not
been expanding in complexity
usable information in a fraction of
just thanks to an increase in
and scope since their inception
the time it would have taken in the
resolution, but also a general
in 2003: this trend is reviewed
past. Video processing software
increase in the number of video
in depth in the Safe City 2017
that allows users to interact
feeds. Indeed, video surveillance
report from IHS Markit. Deep-
with their surveillance footage
data makes up over half of the
learning video analytics will be
using a Google-like interface and
volume of what could be referred
an essential facilitator to realise
natural language search terms
to as “big data” and the proportion
drastically reduces the amount
is rising significantly. While the
of time it takes to find relevant
volume of video data is huge and
video footage in an archive
increasing, the ability of security
that might store video from
companies and end-users to
thousands of feeds.
monitor and review it without
2) Power Not only has deep learning demonstrated its capacity
Facial recognition is also an
assistance is nowhere near up
neurons. Today, only a few GPUs are required to achieve the same sort of computational
Safe and smart city projects
FACIAL RECOGNITION IS ALSO AN AREA THAT HAS BENEFITTED THE MOST FROM DEEP LEARNING ARCHITECTURE.
the safe city concept. Indeed, we are increasingly seeing facial recognition, which more often than not requires deep-learning architecture to function reliably, become a required feature in Chinese tender documents.
area that has benefitted the most
to the task. Deep learning offers
from deep learning architecture.
a number of advantages in this
Indeed, most facial recognition
context, allowing faster, more
analytics on the market today
intuitive review and indexing of
feature some kind of deep
recorded footage, and reducing
learning. Not only does deep
the time it takes to find relevant
system that can operate efficiently
learning increase the accuracy of
images from days, weeks or even
in real time, with much of the
facial recognition sensors, it also
months, down to minutes.
process being automated. Highly
enables faces to be identified in
Computing power will also
Huge amounts of data will be generated from the thousands of sensors deployed across safe cities. A key element of the safe city concept is an integrated
reliable analytics, that are capable
larger and more crowded scenes.
play a significant facilitating
of making inferences on a more
In the wake of recent terrorist
role; deep learning video
abstract level than traditional
attacks on crowded venues,
analytics promise unprecedented
machine-vision algorithms,
this capability could radically
performance, but also require
in a wider variety of weather
change the whole approach to
significantly more computational
conditions, will be essential to
security monitoring, allowing law
power than many traditional
reduce false alarms and the
enforcement to track suspects with
video analytics products. The
level of manpower required to
far greater speed and efficiency.
deep-learning model requires
monitor video feeds.
Herta is one such company that
very many samples, and carries
specialises in facial recognition in
out very many calculations. In
large crowds. Because of this, IHS
the past, hardware devices were
Analytics in Security and
Markit expects verticals such as
incapable of processing complex
Business Intelligence Report –
large shopping malls, airports, and
deep-learning models with over
2017 includes dedicated in-depth
other transportation hubs, along
a hundred layers. For example,
research into deep-learning
with city surveillance projects,
in 2011, Google’s DeepMind used
video analytics market, and is
to be early adopters of this
1,000 devices with 16,000 CPUs
available for purchase through:
type of analytics.
to simulate a neural network
technology.ihs.com. n
securitysolutionsmagazine.com
046-049_SSM109 CCTV B.indd 49
The IHS Markit Video
SECURITY SOLUTIONS // 49
21/08/2017 10:26 am
BUSINESS
DYNAMIC RISK EQUILIBRIUM THE NEXT WAVE
50 // SECURITY SOLUTIONS
050-053_SSM109 Business.indd 50
securitysolutionsmagazine.com
21/08/2017 10:30 am
BY DR GAV SCHNEIDER AND KATE DOWN
The term ‘VUCA’, made popular
now face frustration due to a
risk professionals know that to
obviously these can be improved
by the United States military in
VUCA reality. Since Michael
succeed, business and cultural
and developed over time with
the late 1990s and now adopted
Porter’s groundbreaking work
change must be viewed from a
the right focus and intent. So,
by business schools all over the
in the 1980s, workers have
human psychology perspective.
how is this done? With focus on
world, shows the criticality of
become adept at developing
It takes organisational attributes
several aspects:
dynamic thinking and action.
strategy but unfortunately, as
such as agility and resilience
1. People need to be taught
VUCA stands for volatility,
most experienced leaders know,
to be able to adapt planning as
situational awareness – if
uncertainty, complexity and
they are not nearly as good
required to achieve objectives,
they cannot be present and
ambiguity. It highlights the key
at executing it. This has to do
or even to be wise enough to
orientate, how can they
underlying factors that everyone
with the persistent myth that
know when objectives should
know how to bounce back or
faces in everyday decision making
good execution means always
change. This presents the next
in the modern age. This also
sticking to a plan. It has been well
issue – every industry sector
makes sense from a sociocultural
documented that organisations
can now be seen starting to add
whole-of-person approach
evolutionary perspective because
spend huge amounts of time and
these catchy buzz words: “let’s
– flexible work structures
VUCA encapsulates the human
energy mapping out who should
be agile, let’s be resilient and
and changing trends mean
ancestral nature for adapting
do what and with what resources
because we said we are it has now
people cannot be controlled
to novelty and to change
(Sull et al, 2015). But they cannot
happened!” Or has it…
based on ‘when they are in
itself (Potts, 1998).
anticipate every event. In
Research in the field of brain
Since organisations are
where to move to? 2. It is necessary to embrace the
our buildings’ any more.
volatile markets, managers and
comprised of groups of people,
People need to be educated
science has shown the human
employees need to be agile and
the facets of group interaction
and empowered with the
brain is designed to:
that is not easy. Issues such as
combined with the individual
skills to apply ongoing
1. Solve problems relating
digital disruption, technological
attributes of the people who make
personal development
to survival in an
integration, globalisation and
up these groups is where the
and decision-making skills
unstable environment.
numerous other variables
disjoin seems to lie. People do not
continuously prove that long-term,
just become agile and resilient
3. Mindfulness needs to be
2. Do so in almost constant motion (Medina, 2014).
(Bernstein et al, 2016).
unbending plans serve as a great
because a mission statement is
developed so that people
However, much to the detriment
starting point, but if they are not
changed and catchy posters are
are present when they need
of workplace health, there is
structured with inbuilt flexibility
put up around the office. In fact,
to be (Csikszentmihalyi,
a gap between what science
they usually never work.
if one looks at the core connects
1990) – this has never
behind these two attributes from
been harder in a world of
knows and what businesses do.
Based on this it would seem
This has become increasingly
simple enough to focus planning
a definitional perspective, the
constant communications
evident through the upward
on shorter term cycles and have
complexity in assuming that
and distractions. How many
trend in stress and mental health
inbuilt flexibility. However,
people just get it can be seen:
readers want to check emails
issues and downward trend in
modern age humans struggle
• Resilience – the ability
or look on social media while
productivity. Business leaders and
for stability and continuity and
to bounce back and
strategy professionals who used
resist change, so this is much
exhibit toughness.
to be fixated with the ‘critical’
easier said than done. It is at
need for the three to five year
this point it makes sense to ask
course and direction quickly
they can mitigate the realities of
and longer strategic plan that
why there is resistance to change
and effectively.
cognitive and heuristics biases
factored all variables and strived
from a human psychological
It needs to be acknowledged that
that everyone has, and that
to minimise uncertainty so that
point of view; however,
everyone has different natural
impact decision making and
results could be guaranteed
organisations rarely do. Leading
abilities in these two aspects, but
performance (Ariely, 2008).
securitysolutionsmagazine.com
050-053_SSM109 Business.indd 51
• Agility – the ability to change
reading this article? 4. People need to be taught to understand themselves so that
SECURITY SOLUTIONS // 51
21/08/2017 10:30 am
BUSINESS 5. Enhanced understanding of others and empathy need to be taught so that people can
and governance activity that the
state of mind is now becoming
research supporting DRE that
business ‘has to do’.
well understood. Neuroscience
highly functional organisations
proposes the brain is organised
are those who operate not as a
The importance of cultivating
try and understand each other
DRE is reinforced when
to minimise threat and maximise
transactional network, but as an
better and play to each other’s
attention is focused towards
reward (Rock, 2008). Meaning,
evolved social network. Failed
strengths (Cuddy et al, 2013) to
how today’s workforce is faced
every person’s brain constantly
organisations tend to ignore
achieve workplace harmony
with increasingly complex
scans the environment for
the people dimension, treating
and organisational objectives.
environments, as well as
perceived threats, which leads
the human resource as simply
Only when the above has been
psychological and physical
to the acknowledgement that
cogs in the machine, which
achieved can businesses begin
demands that stem from a fast-
high performing workplaces
inevitably results in the loss of
to start expecting their people to
paced and volatile economy. A
are a by-product of two distinct
those resources. The leaders of
translate the relevant skills and
paper from Harvard Business
forces that mutually influence
industry are those who view their
attributes into the workplace,
School on building a resilient
one another. These forces
human assets as exactly that: an
and develop the ability to be
workplace culture highlights the
are positive organisations (or
asset to be maximised, a potential
organisationally agile and
particularly harsh toll on mental
environment and culture) and
to be utilised and an investment
resilient. Of course, it would be
health with workplace stress
positive individuals, based on
for return. The higher valued,
remiss to ignore the importance
and workforce disengagement
mindset and behaviours. It is
higher trained, higher engaged
of systems and processes but,
(Everly, 2011). In fact, a 2012
accepted that it is the mindset
the workforce, the greater return
in the end, it is people that have
Towers Watson study found that
of an individual that determines
on the investment. Dynamic risk
to use and apply these systems
in most organisations, only 35
their high levels of productivity,
equilibrium is thus the output of
and processes, so if the people
percent of employees said they
profitability, engagement,
a strategic and tactical balance
part is not right, the system
were engaged. In other words,
innovation and quality of life
between people and process that
and process is bound to fail. In
65 percent of employees have
(Kabat-Zinn, 1993). This is a
is constantly evolving.
order to drive this, a focused
mentally checked out, causing
double-edged sword: individual
cultural and behavioural change
productivity, innovation and
resilience can be developed
For a full list of
approach is needed, which
creativity to plummet. The study
through training the person
references, email info@
usually takes around three to
also found that 38 percent of
to focus on their thoughts and
interactivemediasolutions.com.au
five years to be successful in
employees felt stress and anxiety
feelings and examine their
Dr Gav Schneider is an
most organisations. This is where
about the future, and that less
actions and responses, but
acknowledged leader in the field
strategic planning and long-term
than half of the employees
resilience and agility can be
of human-based risk management
vision become critical.
surveyed agreed that senior
either assisted or disturbed by
and the psychology of risk. He
leaders had a sincere interest
the environment in which the
is a leading academic in his field
strive to create what is referred
in their wellbeing (Towers
individual finds themself.
and heads up the Postgraduate
to as a dynamic risk equilibrium
Watson staff, 2012).
The output of all of this is to
(DRE), which is the ability to
In most cases, when viewed
So what is it that makes some
Psychology of Risk program at
organisations able to not only
the Australian Catholic University
innovate and adapt, to take
through the lens of DRE,
survive but also thrive in the face
(ACU). Dr Gav is the CEO of the
calculated and educated risks so
the structure of the modern
of adversity? This is the challenge
Risk 2 Solution group of companies,
that opportunities can be seized.
organisation has not put the
the authors seek to solve through
which focus on delivering
It means that risk baselines
person at the heart of business
can be adjusted to match the
activities. Dr John Medina,
environment and people, based
a developmental molecular
on the opportunities and threats
biologist and author of Brain
that have to be managed. If DRE
Rules, has clearly highlighted that
cannot be achieved, people will
stress impacts people’s ability
constantly lose opportunities,
to perform in business (Medina,
fail to innovate and live in a
2008). There is a growing
risk-averse world where they
recognition that good mental
will steadily see themselves
health at work is a must, not a
and their organisations become
nice to have. This is not simply
obsolete. The challenge is to apply
altruistic, because of the upward
the embedded approach to risk
trend, mental ill health is a main
leadership in everyday life at all
cause of absenteeism. In fact,
levels of organisations so that
the growing recognition that
risk truly becomes opportunity
performance and engagement
and not just another compliance
can be affected by a worker’s
52 // SECURITY SOLUTIONS
050-053_SSM109 Business.indd 52
innovative and cutting-edge
LEADING RISK PROFESSIONALS KNOW THAT TO SUCCEED, BUSINESS AND CULTURAL CHANGE MUST BE VIEWED FROM A HUMAN PSYCHOLOGY PERSPECTIVE.
solutions in the risk, intelligence, safety, security, medical and emergency response sectors. Visit www.risk2solution.com for more information. Kate Down is a behavioural scientist and coach who specialises in social and emotional intelligence and rational thinking. Kate heads up Risk 2 Solution’s: People, Culture and Behavioural change division. She is an Associate Member of the Australian Psychological Society and a lecturer on ACU’s innovative Postgraduate Psychology of Risk program. n
securitysolutionsmagazine.com
21/08/2017 10:30 am
TR
OR
050-053_SSM109 Business.indd 53
HÉE D’ OP
21/08/2017 10:30 am
COVER STORY
C R S AVE TRUST N A I L A R T S U A
AS
SECURITY
CONCERNS
REACH DECADE HIGH BY JOHN KENDALL
At a time when the Australian public’s concern about security issues is at a decade high, John Kendall, director of the Border and National Security Program, Unisys, explores why concerns are so heightened and what organisations can do to restore consumer trust in their safety.
54 // SECURITY SOLUTIONS
054-059_SSM109 Cover Story.indd 54
securitysolutionsmagazine.com
21/08/2017 10:32 am
securitysolutionsmagazine.com
054-059_SSM109 Cover Story.indd 55
SECURITY SOLUTIONS // 55
21/08/2017 10:32 am