A U S T R A L A S I A’ S L E A DI N G S E C UR I T Y R E S OUR C E F O R BU S I N E S S A N D G O V E R N ME N T
JULY 2018 ISSUE 113
HOW WILL
MACHINE LEARNING CHANGE SECURITY?
PA S 6 8 & I WA T E S T E D G U A R A N T E E D
W W W. E
25 YEARS OF BUILDING SMART AND SECURE OUTDOORS E zi Security Systems designs, manufactures and installs a premium range of perimeter security solutions for both vehicle and pedestrian access control, with specialised expertise in Hostile Vehicle Mitigation and protection of Crowded Spaces. With core competence established over 25 years, Ezi Security Systems provides innovations of our own invention, and via alliances with undisputed world leaders in our field, deliver sophisticated solutions at the leading edge of global technology. Over the past 5 years the world has changed dramatically. In collaboration with our strategic business partners, Ezi has responded with focus, mitigating hostile vehicle threats with our Crowded Spaces range of products. Ezi offers permanent solutions for risk categories from low to extreme, as well as rapid deployment products for crowded spaces and public events, such as the Impakt and Rapid Defender products.
Z I S E C U R I T Y. C O M . A U
All Ezi Security Systems Hostile Vehicle Barrirer solutions have been rigorously crash tested and certified to meet requisite ASTM, IWA and PAS 68 stipulations. Along with our global partners, Ezi Security Systems actively collaborate in the development and deployment of contemporary strategies such as VAAW (Vehicle as a Weapon) mitigation, deploying whole of environment solutions. Ezi have solutions to meet your very highest security requirements whilst maintaining an aesthetically compatible solution for your site. You can be confident that when serious security is your requirement, you need look no further than Ezi. We stand ready to be of expert service in an ever evolving environment, as global security risks increasingly demand local solutions.
1300 558 304 11 Cooper Street Smithfield, NSW, Australia 2164 sales@ezisecurity.com
ISSUE 113
FEATURES
40
24
CONTENTS
78
50
46
28
COVER STORY
Artificial Intelligence (AI) is transforming every industry it touches, from healthcare to transportation to agriculture. So it should come as no surprise that the security industry is starting to be transformed through AI as well. In fact, security, automotive and healthcare are in the top tier of industry verticals to benefit from this amazing technology. Security has some major influences driving the adoption of AI, including the increasing threat of terrorism and more sophisticated security perpetrators. What exactly is AI and what role might it play in the future of security?
24 STANDARDS INCREASING SECURITY
We look at the role of Standards Australia in the evolution of security in Australia. What are they doing in the areas of traditional security standards and how are they innovating in response to the needs of the sector, including developing standards at an international level?
44 FAMILIES THAT SLAY TOGETHER
Anne Speckhard and Adrian Shajkovci of the International Center for the Study of Violent Extremism (ICSVE) look at the recent terrorist incidents in Indonesia – three nearly simultaneous suicide attacks on three separate churches in Surabaya, all carried out by members of the same family.
48 UNDERSTANDING AUSTRALIAN BUSINESS ATTITUDES TO CYBER SECURITY
We look at the results of the BDO and AusCERT 2017/2018 Cyber Security Survey which delivers insights into the cyber resilience and maturity of Australian and New Zealand businesses, as well as the cybersecurity risks and realities faced by Australian and New Zealand businesses across a range of organisation sizes and industry verticals.
64 PERSONAL PROTECTION IN THE LAND
OF THE DRAGON
Paul Johnstone looks at the booming private protection industry in China.
68 SEVEN WAYS TO EXHIBIT LIKE A PRO
Get all the information you need to make your visit to this year’s Security Expo and Conference in Melbourne a success.
62
REGULARS 06 LETTER FROM THE EDITOR 08 LEADERSHIP
How can you lead through empowerment?
10 STRATEGY
32 OPERATIONS
Richard Kay examines the value of reality-based training.
36 BUSINESS
How can you keep your business relevant in a rapidly changing industry?
What is the relationship between enterprise risk management and security?
52 AVIATION SECURITY
12 CYBER SECURITY
56 ACCESS CONTROL
14 HUMAN RESOURCES
60 PROFESSIONAL DEVELOPMENT
What is a cyber resilience assessment and why do you need one?
Greg Byrne examines the responsibility of employers regarding superannuation.
16 RISK MANAGEMENT
Do body scanners work?
How will Access Control as a Service (ACaaS) change the industry?
We present the first of a two-part special on behavioural interviewing.
72 EVERYDAY CARRY
Kevin Foster explores the foundation for a dynamic model of risk control.
As an active security operative, you need to be prepared. We look at some of the best everyday carry gear for security professionals.
18 LEGAL
76 PRODUCT SHOWCASES
Justin Lawrence looks at what happens when a business fails.
20 THINKING ABOUT SECURITY
Don Williams looks at the latest Australian New Zealand Counter Terrorism Committee guidelines for protection of crowded places.
80 SPOTLIGHT 82 SHOP TALK
Company announcements from within the industry.
22 EVENTS CALENDAR
A look at upcoming industry events.
4 // SECURITY SOLUTIONS
securitysolutionsmagazine.com
FROM THE EDITOR FROM THE EDITOR www.securitysolutionsmagazine.com
EDITORIAL www.securitysolutionsmagazine.com
EDITOR John Bigelow EMAIL john@interactivemediasolutions.com.au EDITORIAL SUBEDITORS Sist, Ged McMahon EDITOR JohnHelen Bigelow EMAIL john@interactivemediasolutions.com.au SUBEDITORS Helen CONTRIBUTORS Sist, Ged McMahon
Jason Brown, Tim Rippon, Bob Ansett, Greg Byrne, Kevin Foster, Justin Lawrence, Don Williams, Scott CONTRIBUTORS McGrath, AnnaJason Silwon, Richard Anne Speckhard, Garry Barnes, Brown, GregKay, Byrne, Kevin Foster, Adrian Johnston, McGiffin, Steve RichardShajkovci, Kay, StevePaul Lawson, JustinJohn Lawrence, Scott Lawson, Scott Lindley, Elly Johnson O’Driscoll, Rita Parker, Don Williams, Lamie Saif, Anne Speckard, Alex Sidernko, Ardian Shajkovci, Ami Toben, Simeon Votier
ADVERTISING
Keith Rozairo PHONE 1300 300 552 ADVERTISING Keith Rozairo EMAIL keith@interactivemediasolutions.com.au PHONE 1300 300 552 EMAIL keith@interactivemediasolutions.com.au Jonathan Rudolph DESIGN1300 AND300PRODUCTION PHONE 552 Jonathan Rudolph EMAIL graphics@interactivemediasolutions.com.au PHONE 1300 300 552 EMAIL graphics@interactivemediasolutions.com.au
DESIGN AND PRODUCTION
MARKETING AND SUBSCRIPTIONS PHONE 1300 300 552 MARKETING AND SUBSCRIPTIONS EMAIL admin@interactivemediasolutions.com.au PHONE AUD 1300inside 300 552 $62.00 Aust. (6 Issues) $124.00 AUD outside Aust. (6 Issues) EMAIL admin@interactivemediasolutions.com.au $62.00 AUD inside Aust. (6 Issues) $124.00 AUD outside Aust. (6 Issues)
ACCOUNTS PHONE 1300 300 552 ACCOUNTS EMAIL accounts@interactivemediasolutions.com.au PHONE 1300 300 552 EMAIL accounts@interactivemediasolutions.com.au
PUBLISHER PUBLISHER
ABN 56 606 919463 Level 1, 34 Joseph St, Blackburn, Victoria 3130 ABN 56 606 919463 PHONE 300 552 Level 1,1300 34 Joseph St, Blackburn, Victoria 3130 EMAIL PHONEenquiries@interactivemediasolutions.com.au 1300 300 552 WEBSITE www.securitysolutionsmagazine.com EMAIL enquiries@interactivemediasolutions.com.au WEBSITE www.securitysolutionsmagazine.com DISCLAIMER The publisher takes due care in the preparation of this DISCLAIMER magazine and takes all reasonable precautions and
The publisher takes due care in the preparation of this makes all reasonable effort to ensure the accuracy magazine and takes all reasonable precautions andof material in effort this publication, butaccuracy is not liable makes allcontained reasonable to ensure the of for any mistake, misprint omission. but Theispublisher material contained in thisor publication, not liable does notmistake, assume any responsibility or liability for any for any misprint or omission. The publisher loss or damage which may result from any inaccuracy does not assume any responsibility or liability for any or omission in this publication, orfrom fromany theinaccuracy use of loss or damage which may result information herein. The publisher makes or omission contained in this publication, or from the use of no warranty, express or implied to any of the information contained herein.with Therespect publisher makes no material contained herein. warranty, express or implied with respect to any of the material contained herein. The contents of this magazine may not be reproduced in ANY form in OR in part without The contents ofwhole this magazine may not be WRITTEN reproduced permission from the publisher. Reproduction includes in ANY form in whole OR in part without WRITTEN copying, photocopying, translation or reducedincludes to any permission from the publisher. Reproduction electronic medium or machine-readable form.to any copying, photocopying, translation or reduced electronic medium or machine-readable form.
WRITTEN CORRESPONDENCE TO: WRITTEN TO: Level CORRESPONDENCE 1, 34 Joseph St, Blackburn, Victoria 3130
It would seem, according to many of the
world is changing rapidly.
world’s leading experts in AI, that the difference
Long-established oes Australia really technologies take security and professions are giving wayclaims to new seriously? Yes, Government
and exciting fields endeavour and to, andofsome of the corporate technologicalsector advancement faster than many demonstrate a passing industries can keep up. Just aswhat analogue interest from time-to-time, but of thesecurity systemsman gaveand way to digital technologies, new average woman on the street? Do we IP-basedtake systems are seriously rapidly displacing honestly security or do we, more as a
between ado bright in whichattitude life is safer Australian’s have future a very relaxed morebecause secure, they or a world inrightly which or we are all toand security believe, nuked out Skynet, could be as wrongly, thatof “itexistence will neverby happen here”. This as the of autonomy giventrue. to is simple a sentiment welevel can only hope remains AI-based Do we let intelligent However, assystems. the old axiom states, one should machines and how they always expect thesystems best butdetermine plan for the worst and will react tosurprised. a given situation and, if so, what prepare to be level of control will wenot allow them over the Of course, one should have to rely upon
traditional coax-based systems. Similarly, the nation, just pay lip service to the idea emergence of security? of Deep Learning and Artificial
actions For example, if a to drone some formtaken? of devastating incident occurisinable to
Intelligence (AI)2018, are set replace of the As we enter weto should be many thankful that
circle major to event use AI to identify order to over forceapeople takeand security seriously.
existing technologies we view as cutting edge. Australia has never suffered a major terrorist
potential threats warn security There is a great dealand thatthen the security industry
incident the likesnow, of 9/11, the only Boston bombings, Ten years from one can begin to
can do to educate the business community services of those threats, that would beabout an
the bombings of July 2005 inand London or the imagine the sorts of 7, systems technologies
the benefits of taking security seriously. improvement in security. However, inIn a past more
terrorist of October 12, 2002 in Bali. that willattacks have become commonplace.
issues Security Solutions Editor-At-Large Rod extreme example, what if the drone determines
However, as a result, Australian community The 2002 Steventhe Spielberg movie Minority
Cowan has written about can act as the detected threat to how be a security suicide bomber,
has become somewhat complacent with regard Report, starring Tom Cruise, demonstrated
a differentiator and give companies and believes for thatbusiness the suicide bomber is within
to security. I often hear many of our readers the use of gesture control, amongst other who are security managers within large corporations technologies, which at the time seemed so
a competitive edge. seconds of detonating an explosive? Should the
comment onfuturistic the differences between Now, attitudes amazingly and innovative. less to security in Australia and America, where they than two decades later, gesture control has
If we be have learned from tragic drone fitted withanything the capability to neutralise events that have occurred globally in recent such a threat? If so, should the drone be given years, it must be that the world has changed – the autonomy to make split-second decisions
often have to travel and According to many become a common waywork. of life. From smart TVs in security managers, Americans understand that and our homes to smartphones, tablet computers
permanently – andorwe cannot keep pretending about whether not it is necessary to that it has not. 9/11 was not an isolated incident I neutralise the threat and then act accordingly?
terrorism a clearand andbrowse presentinformation danger andwith a so on, weisaccess a fact of daily life and thus, they treat security flick of the wrist, we choose potential dates by
and groups way, such amifsure youlike canISIS seehave the their difference. attacks will become much more frequent. There To help better understand AI and how our
and security workers with the due respect. In swiping left or right and we zoom in and out of contrast, they believe that Australian’s have a images and text with a pinch of our fingers. very blasé attitude towards security and it is this Imagine a world in which intelligent software attitude that makes us much more vulnerable is able to sort through petaflops of information to attack. from thousands of sources in the blink of an In my opinion, having recently travelled eye to identify people intent on doing harm or through Egypt and Jordan, they are correct. committing unlawful acts. Those same resources
is a great deal more work to be done to ensure security systems are getting smarter, we asked that we create the kind of effective security John McGiffin of Deep Recognition, experts culture within organisations and the broader in the field of deep machine learning and community that will enable Australian’s to be systems, to write this issue’s cover story. John safe and secure. And the work must begin with has provided a great introduction to how AI and security professionals. Let’s make 2018 the year deep machine learning work to help people that Australia begins to take security seriously. n like me get their head around where the future
could then more accurately direct security
of security technology is going. Be sure to
resources to maximise their effectiveness
check it out. If you are attending the Security Expo from
and provide better security outcomes. The possibilities are both exhilarating and terrifying
25th–27th July in Melbourne, be sure to drop by
at the same time.
and say hi. n
SSOCIATI RS A ON DE O VI
RALIA LTD
SECURIT Y
PR
UST FA
O
Level300 1, 34 Joseph St, Blackburn, Victoria 3130 1300 552 1300 300 552 enquiries@interactivemediasolutions.com.au enquiries@interactivemediasolutions.com.au
M D
uch like Security Solutions, the
Official Official Partners Partners O C I AT I
ON
Y P R OVI D RIT
CU SE
STRALIA LTD AU
PR O
ASS
SPAAL D LT
OF
SECURITY
RS
AU S T R A L I A
SSOCIAT IO N
OF
E
Original Size
RS A DE VI
blue colour changed to this colour green.
COPY/ARTWORK/TYPESETTING APPROVAL Please proof read carefully ALL of this copy/artwork/typesetting material BEFORE signing your approval to print. Please pay special attention to spelling, punctuation, dates, times, telephone numbers, addresses etc, as well as layout.It is your responsibility to bring to our attention any corrections. Minuteman Press assumes no responsibility for errors after a proof has been authorised to print and print re-runs will be at your cost. Signed.................................................................. Date........................
// SECURITY SECURITY SOLUTIONS SOLUTIONS 46 //
John Bigelow John Bigelow Editor Editor
securitysolutionsmagazine.com securitysolutionsmagazine.com
SECURE YOUR DATA & EQUIPMENT
A data enclosure is your last line of defence, so it needs to be strong enough to stop unauthorised access. CER TIF IE CLASS C
D
The MFB range of Class B and Class C enclosures are purpose built frames fitted with key locks and boltwork approved by the Australian Government Security Construction and Equipment Committee (SCEC)
INATION LOCK MB S CO
All enclosures are fitted with tamper evident cable entry systems, high impact clear polycarbonate panels on doors, secure venting systems and certified combination locks. CLASS B
An alternative product, the MFB range of High Security enclosures provides a lower level of security and is not SCEC approved. Effectively construction methods mirror the Class B and Class C series, however the doors are fitted with a cheaper bilock keying system. Also additional flexibility with the design regarding cable entry encourages effective quick installation and high volume data cable installations. With over 50 years in the business, and backed by the SCEC approval for manufacture, these Australian built 19”rack mount enclosures provide peace of mind in relation to the security your
data needs.
DESIGNERS & MANUFACTURERS OF 19” RACK SYSTEMS
www.mfb.com.au
VIC (03) 9801 1044 / sales@mfb.com.au
AUSTRALIAN MADE MAKES AUSTRALIA NSW (02) 9749 1922 / sydney@mfb.com.au
fb.com/mfbproducts
LEADERSHIP
LEADING BY EMPOWERING BY BOB ANSETT
F
or many, the thought
restraint to keep from meddling
do. If this is not possible for some
of a leader
with them while they do it.”
reason, make sure they understand
have the right attitude. Insecurity
To empower people, you must
empowering
Great leaders know the value
the overall purpose of the task.
will cripple your ability to empower
followers to make
of involving people as much as
This includes defining exactly
others. You cannot be afraid. Do
decisions is almost a contradiction
possible in all aspects of work
what you want them to do. Then
not let the fear of empowering a
in terms. The common perception
and planning decisions. This is
ask questions, watch the tasks
person make you feel like you will
of leadership is that of the
because involvement increases
performed and have the individual
be displaced. Empowering people is
micromanager who finds it difficult
ownership commitment and fosters
assigned the responsibility give
incredibly fulfilling in so many ways.
to empower others to take decisive
an environment in which people
you feedback to make sure your
When you empower people, you are
steps and accept the responsibility
choose to be motivated and to
instructions were understood.
not just influencing them; you are
that goes along with it.
contribute. It is also a key element
But hey, wait a minute! When we
in team building. As a leader, you
look through the annals of history
are ultimately accountable for
and examine the role of great
the performance of your team, so
leaders, we inevitably discover the
you must have in place a method
really great ones were effective
for holding your team members
delegators. Here is a brief sample
accountable for the roles they play
of what some of them have to say
in the organisation.
about empowerment: • Bill Gates – “As we look further
It takes time and commitment to build a team that is based on
influencing all those around them. In essence, great leaders succeed in delegation by: • providing clear instructions to their followers • describing clear expectations of the task at hand • allowing their team members to make decisions • providing clear deadlines for
And it is always useful to remember there is no success without a successor. So, the process of empowering others is critical to the achievement of the overall objective. In the final analysis, delegation is a critical aspect of leadership, which is defined as a process whereby an individual influences a group of
into this century, great leaders
trust, respect and hard work. It is
will be those who empower
not always easy, but the pay-off is
• setting up their followers for
goal. The effective leader intuitively
others.”
worth the effort. When the going
success through playing to
knows that delegation of tasks and
gets tough and you hit a snag in
their strengths.
responsibilities to others expands
• Abraham Lincoln – “Nearly all
task completion
individuals to achieve a common
men can stand adversity, but
your delegation process, do not
Effective leaders trust and believe
his/her capacity to take on even
if you want to test a man’s
throw in the towel. Analyse what
their followers are going to
greater responsibilities and thus
character, give him power.”
went wrong and what needs to
succeed until proven differently.
become a better leader. n
change to fix it. Getting an effective
When failure does occur, they
tell people how to do things.
delegation mindset can take time,
first look to themselves to see if
Tell them what to do and they
but once you have clarity on what
they provided clear expectations,
Ansett Marketing, a consulting firm
will surprise you with their
you should and should not do to
direction and the tools necessary
in the field of customer service. Bob
ingenuity.”
manage your team, you are on the
for the delegated task to be
is also a familiar name in Australian
path to delegation success.
completed successfully. Great
business, synonymous with Budget
leaders know that the buck stops
Rent a Car, which he established in
• General George Patton – “Never
• Theodore Roosevelt – “The best leader is the one who has sense
When delegating
Bob Ansett is the founder of Bob
enough to pick good men to do
responsibilities, where possible,
with them. Micromanagers tend to
1965. Bob can be contacted at
what he wants done, and self-
give the recipient a whole task to
assign blame.
bob@bobansett.com.au
8 // SECURITY SOLUTIONS
securitysolutionsmagazine.com
Intelligent security solutions from Dahua Technology Discover Dahua, a world leader in video surveillance, offering high value total security solutions to safeguard assets, communities and infrastructures.
now available at Hills! Unified Management Platform Video Surveillance
Unified UnifiedManagement Management Platform Platform Video VideoSurveillance Surveillance
Unified Management Platform Video Intercom Video Intercom
Video Surveillance - Advanced video collecting and analysing - Wide coverage w/o blind angle
Video Surveillance Video Surveillance
Unified Management Platform Unified Management Platform
- Advanced video collecting and analysing - Advanced video collecting and analysing - Wide coverage w/o blind angle - Wide coverage w/o blind angle
- High reliability with low running cost - High reliability with low running cost - Scalable and customisable - Scalable and customisable
HSS0031-July18-version 1
For more information on these and other best-in-class solutions from Hills call us on 1300 HILLS1 (445 571) or visit hills.com.au
facebook.com/HillsLtd/ CONNECT
E N T E RTA I N
SECURE
- High reliability with low running cost - Scalable and customisable
Video Intercom Video Intercom - Support both IPIP and Analogue - Support both and Analogue - Attractive design - Attractive design
STRATEGY
ENTERPRISE RISK MANAGEMENT AND SECURITY Good risk management can result in value creation and contribute to sustainable organisational performance that helps organisations achieve their strategic objectives. It must permeate all levels of an organisation and hence it needs to be addressed.
of updating guidance and developing supporting materials, where appropriate. Enterprise Risk Management — Integrating with Strategy and Performance provides a framework for boards and management in entities of all sizes. It builds on the current level of risk management that exists in the normal course of business. Further, it demonstrates how integrating enterprise risk management practices throughout an entity helps to accelerate growth and
Risks at an Enterprise Level
all the activities of an organisation; it
with a right and wrong answer.
enhance performance. It also contains
In the case of security, there are a range
is a responsibility of all employees.
Organisations encounter challenges
principles that can be applied, from
of malicious actors who will endeavour
Legislation, regulation and governance
that impact reliability, relevancy and
strategic decision making through
to achieve their own goals at the expense
codes expect appropriate evidence of
trust. Stakeholders are more engaged
to performance.
of the enterprise, and often society as
responsible risk management processes
today, seeking greater transparency
Risk is not an easy term to define,
a whole. Security professionals must
being applied and managed across all
and accountability for managing the
so there are various definitions. While
ensure that the risks they seek to control
areas of the organisation’s activities to be
impact of risk while also critically
risk is often considered in terms of the
and mitigate are adequately addressed
available on an ongoing basis, with clear
evaluating leadership’s ability to
likelihood of something happening
throughout the enterprise, hence
communication on policies, procedures
crystallize opportunities. Even success
and the severity of the outcome, risk
an understanding of enterprise risk
and processes expected.
can bring with it additional downside
as a concept is more complex, and that
risk – the risk of not being able to fulfil
complexity needs to be understood.
management is important. In the first of
The Changing Risk Landscape
unexpectedly high demand, or maintain
examine the role of risk management
The 21st century multi-polar, hyper-
expected business momentum, for
of uncertainty on objectives’, where
in the enterprise and burrow down to
connected, social media driven, fast-
example. Organisations need to be more
uncertainty may relate to a deficiency
frameworks for managing security risks
paced world in which we live presents
adaptive to change. They need to think
of information, understanding or
at all levels of enterprise.
an environment in which we need to
strategically about how to manage the
knowledge of an event, its consequences
understand and master complexities and
increasing volatility, complexity and
or its likelihood. When making decisions
uncertain, chaotic and ambiguous.
uncertainties on a scale never before
ambiguity of the world, particularly at
as part of managing risk, it is important
These elements collectively feed the
encountered by the average person.
the senior levels in the organisation
to remember that this is not an absolute
and in the boardroom where the stakes
science; it is about managing uncertainty
are highest.
to achieve objectives that may include
what will be a series of articles, we will
We live in a world that is volatile,
uncertainty which plagues decision
Business models from the most
ISO 31000 defines risk as the ‘effect
makers seeking to get the best results.
sophisticated in banking to the most
Organisations of all sizes and types need
rudimentary in transportation in the
to recognise and manage the uncertainty
developed world and financial services in
Risk Management Frameworks
objectives. Risk is also circumstance-
present in the world and impacting
the underdeveloped, are being disrupted
The management standard ISO 31000
specific and has to be dynamic, iterative
all organisational activities in order
as never before. Survival today requires
provides a risk management framework
and responsive to change.
to optimise performance. Developing
agility, flexibility and automation.
that supports all organisational activities,
insight into how risk may affect the
The Global Financial Crisis
social, environmental and economic
Such uncertainties may relate
including decision making at all levels
to technical and human factors;
objectives of organisations and their
(GFC) of 2008 and the international
of the organisation. The ISO 31000
environmental impacts; social
stakeholders, and managing this well, is a
failure to achieve strategic
framework and its processes should be
benefits; economic factors, such as
key performance factor that contributes
objectives in Afghanistan, Iraq and
integrated with management systems to
the cost of energy, commodity prices
to the success of the organisation. Good
Syria powerfully demonstrated
ensure consistency and the effectiveness
and exchange rates; geological and
risk management is an expectation of all
complex interdependencies which
of management control across all areas of
climate conditions; and political
stakeholders, both internal and external.
were not understood by even the
the organisation.
risks. To manage risk effectively,
To build sustainable performance, organisations have to clearly understand the relationships and links between
most sophisticated organisations and countries. This changing risk landscape, our
The principle objective of the
uncertainty and unpredictability must
International Standards Committee ISO/
be recognised and information gaps
TC 262 – Risk management is to help
filled to reduce uncertainty. In addition
their objectives, strategies and risk
understanding of the nature of risk,
organisations ensure their viability and
to comprehensive technical work, this
management processes in the interests
and the art and science of choice lies
success over the longer term in the
requires engagement with relevant
of all stakeholders.
at the core of our modern economy.
interests of all stakeholders by providing
stakeholders who will have different
Every choice we make in the pursuit
good risk management practice. The
perceptions of uncertainty.
has overall accountability for the
of objectives has its risks. As we
committee regularly reviews the needs of
management of risk. The management
seek to optimise a range of possible
end-users and risk professionals, across
Enterprise Risk Management Model and
of risk should be integrated across
outcomes, decisions are rarely binary,
markets and sectors, with the intention
look to specific security examples. n
The board, or its equivalent,
10 // SECURITY SOLUTIONS
In the next article I will expand on the
securitysolutionsmagazine.com
The Cobalt is an innovative low voltage motor driven door lock for swing doors. It has been designed to secure double acting doors and addresses the two biggest issues in door locking; the ability to align a misaligned door and the ability to release when requested, even with excessive load on the door. The Cobalt successfully overcomes these issues and offers the user an array of other features. To learn more about our complete range of smart and secure access solutions, contact dormakaba.
T: 1800 675 411 www.dormakaba.com.au
More than just a lock
CYBER SECURITY
WHY YOU NEED A CYBER RESILIENCE ASSESSMENT BY TIM RIPPON
C
ybersecurity is the
clients, ensuing lawsuits, along
preservation of
with the significant reputational
of-service attacks, including the
confidentiality,
damage, is real and may result in
takedown of entire websites
integrity and
this company suffering huge losses,
• unwanted disruption or denial-
• changes to the characteristics of
availability (CIA) of all electronic
with a real potential that it may
a computer system’s hardware,
information (digital assets) in
have to cease trading.
firmware or software without
the cyberspace.
All company executives and
the owner’s knowledge,
organisation’s cybersecurity program • development of strategy and budgets for future business plans and objectives • recognition if the business is already compromised
Cyberattacks, including the
the leadership teams are under
hacking of business websites and
increasing pressure to prevent
The procedures for investigating
computer systems, are becoming
these attacks and must act
and responding to a cyberattack
increasingly common. These attacks
immediately to contain any damage
usually depend on the nature
can be extremely damaging to
once an attack occurs.
of the attack itself and how
A conversation with your
businesses, particularly if security is
A cyberattack, as most
instruction or consent.
• identification of critical supplier dependencies • improvement of cyber awareness culture.
prepared an organisation is for
cybersecurity staff or a trusted
breached and confidential business
readers will be aware, is an attack
such an attack. The response
consultant can commence the
and personal data becomes
initiated from a computer against
taken by the business will depend
journey to becoming more cyber
compromised. Cyberattacks, and
a website, computer system
on the maturity, awareness and
resilient, with the first step
the resulting security breaches,
or individual computer that
senior leadership endorsement
progressing through an essential
are part of a rapidly expanding
compromises the confidentiality,
for cybersecurity.
cyber resilient assessment that
international cyberthreat that costs
integrity or availability of the
companies and taxpayers billions of
computer, or information stored
assessment has many benefits and
dollars each year in lost information
on it. Cyberattacks take many
may enable:
and downtime, impacting staff
forms, including:
• continuity of critical business
productivity and the bottom line.
• unauthorised use of a computer
In the current local media, we have observed the fallout of thousands, if not millions, of
system for processing or storing data • installation of viruses or
records breached by an Australian
malicious code (malware) on a
software-as-a-service vendor that
computer system
has provided human resources
• gaining, or attempting to
(HR) software to many well-known
gain, unauthorised access to a
companies and government
computer system or its data
agencies. This one breach has the
• inappropriate use of computer
recruitment industry standing up
systems by employees, former
and taking note. The threat of losing
employees, or agency staff
12 // SECURITY SOLUTIONS
Conducting a cyber resilience
process • informed cybersecurity decisions to be made • identification of vulnerabilities and mitigation of risks • alignment of cybersecurity with the business plan • compliance with regulatory,
determines what is already in place to protect your digital assets. n Tim Rippon is the founder and director of elasticus, advising Australian-based executives on how to best manage cybersecurity, disaster recovery and business continuity before a major disaster or crisis occurs. He holds a certified Master of Information Security (ISO 27001), certified Master of Business
legal and compliance
Continuity (ISO 22301) and Lead
obligations
Cyber Security Manager (ISO 27032)
• understanding of the effectiveness of the
from PECB. Tim can be contacted via mobile 0417 036 026.
securitysolutionsmagazine.com
YO UR AC CES S TO REVO LUTI O N
FlowMotionÂŽ
For more information | 1300 364 864 | info@magnetic-oz.com | www.flowmotion-access.com |
HUMAN RESOURCES
THE RESPONSIBILITY OF EMPLOYERS TO PAY SUPERANNUATION BY GREG BYRNE
he compulsory
bills that proposed employers
compliance obligations. If any of
payments to the appropriate
employer
who disobey ATO directions to pay
your employees earn more than
superannuation fund(s) within
contribution scheme
superannuation entitlements be
$450.00 per calendar month, you
the 28-day requirement. SG
was introduced in
subject to court-ordered financial
must, as a minimum, pay each of
obligations are not satisfied on
1992 by the Keating Labor
penalties as well as up to 12 months
your employees the SGC, which as
payment to the clearinghouse;
Government. The reform created
imprisonment. All directors will also
at May 2018 is 9.5 percent of their
they are met when the
the Super Guarantee Charge (SGC)
be issued a director identification
ordinary time earnings. The SGC will
superannuation fund receives
obligation and was part of a more
number that will enable the ATO to
increase to 10 percent on the 1st of
the contributions, with the
comprehensive reform package.
identify those directors who are not
July 2021 and to 12 percent on the
exception of the Small Business
The Government’s intent was to
paying employee superannuation.
1st of July 2025.
Superannuation Clearing House.
T
ensure the financial future of all
The superannuation compliance
(see ato.gov.au/rates/key-
Most clearinghouses require up
Australians and to ease the burden
bills also propose making single
superannuation-rates-and-thresh
on Australia’s strained welfare
touch payroll mandatory for all
olds/?anchor=Superguaranteeper
Advice from AHRI is for employers
system into the future.
employers from the middle of
centage)
to conduct a review of their
Despite this, on the 30th of
2019. Superannuation funds will
Research conducted by the
to 10 days to process.
processes and payments to ensure
August 2017, the Australian Taxation
also be required, from the middle
Australian Human Resources
they are complying with their legal
Office (ATO) announced that $17
of 2019, to report to the ATO every
Institute (AHRI) identified areas
obligations. For further information
billion in unpaid superannuation
superannuation payment that is
where employers mostly trip up.
on these proposals, it is advised
was owed to Australia’s workforce.
made to every employer.
They include:
to speak to your solicitor or
1. Incorrect treatment of
accountant. n
One of the reasons for this was
Other proposed changes include
the fact the onus was placed on
forcing monthly superannuation
contractors – a contractor
employees to bring any non-
payments by employers instead
can still be deemed to be
compliance to the attention of their
of the now required quarterly
an employee for super
Director of Multisec Consultancy Pty
employers or the ATO. Cowed by
payments, increased powers
guarantee (SG) purposes,
Ltd. He also lectures part-time at the
job insecurity, many are reluctant to
to seek court order penalties,
depending on the nature of the
Western Sydney University, where he
rock the boat.
encouraging the reporting of non-
contractual arrangements.
teaches an undergraduate diploma
The ATO announced in January
Greg Byrne is the Managing
in policing. He works as a subeditor
compliance, and the introduction
2. Missing payments from the
2018 that in response to this
of a single touch payroll payment
definition of ordinary times
for the Australian Police Journal and
extraordinary debt, it was forming
system that will give the ATO
earnings when calculating
is a serving member of the board of
a task force to crack down on this
real-time visibility over wage and
9.5 percent superannuation
directors. He possesses a number of
non-compliance for superannuation
superannuation payments.
contributions, notably the
academic qualifications, including:
omission of specific allowances
Master of Management, Diploma
and directors’ fees.
of HR, Grad Cert in Leadership
laws and to protect the future of employees. In support of the task force,
With the penalties for SGC non-compliance dramatically increasing, it is essential for all
3. Employers using clearinghouses
and Diploma in Security Risk
in 2018 the Government tabled
employers in the Australian security
must ensure that sufficient
Management. Greg can be contacted
draft superannuation compliance
industry to be fully aware of their
time is allowed for it to make
via email greg@multisec.com.au
14 // SECURITY SOLUTIONS
securitysolutionsmagazine.com
Smart Vehicle Identification
Photos credits: Shutterstock - aressy.com 04/18 - 10917
New Spectre reader: Let the good go, kick the bad out. Without delay. Meet the challenge of fast-track security at your vehicle gates. Spectre’s UHF-based vehicle ID reader is the first of a new generation: discreet by design, flexible in its configuration, secure and encrypted in its communication. Our new long-range reader is built to perform for up to 4 driveways, even in highly challenging environments. It’s the most robust reader on the market, yet intuitively easy to use. Welcome to speed and security - in a single solution.
SCALABLE | SMOOTH | SECURE | AGILE | STEALTH | INSTINCTIVE
www.stid-security.com Security Meetings Trophées de la sécurité Expoprotection ISC West APS
RISK MANAGEMENT
THE FOUNDATION FOR A DYNAMIC MODEL OF RISK CONTROL BY KEVIN J. FOSTER
O
rganisations and
event. It is a cognitive failure which
may follow a systemic increase
complexity and simplicity are also
individuals constantly
can occur due to a multitude of
in disordered data (entropy) or a
important within the context of
collect and interpret
factors. Politico-cultural biases
systemic increase in noise.
cultural biases. A contingency-
messages from their
will determine what data should
Communication in complex
based risk control model relating
operational environment. The
be collected, how it should be
operational environments can
different cultures to differing types
messages may be accurate and
interpreted, and what action should
affect not only the psychological
of decision processes is needed to
complete, or they may be distorted.
be taken.
environment but also the
develop a new model for the study
The risk image is compared
operational environment. Biases
of the dynamical behaviour of risk
the transmitter, the communication
with a datum reference perception
are ubiquitous whenever security
management systems.
channel, or the receiver. Such
of acceptable risk. The difference
analysts and decision makers
communication problems might be
between the acceptable risk and
attempt to monitor operational
modelling process which involves
unavoidable and they may be
the risk image may be amplified
environments. These biases can
the fusion of numerous theoretical
deliberate. The data in the
socially and by various overt and
affect risk data indexing systems,
concepts from several disciplines
messages is used to develop an
implicit actions or decisions.
which in turn affect images of risk
into a unified and dynamic
hypothesis about an entity’s intent
These amplifications, or gain, will
and the operational environment
cybernetic model for describing
and capability, or of the likelihood
affect the operational and future
itself. They also have an indirect
risk and surprises in a simple and
of some random event. The
environments. There will also be
effect on the future environment.
practical way. n
hypothesis will indicate that the
other disturbances which may
These biases may be imposed on
entity or event is, or is not, a threat.
affect the environments.
the analyst and decision maker
The distortion may be caused by
Any new data that becomes
The dominant cosmology of the
To do so requires a deductive
This new model of dynamic risk
by matters of complexity, social
analysis and its application will
available may be categorised in
risk decision maker will determine
context, political culture and
be explained in later editions of
such a way that it supports the
the importance of organisation
routinised heuristics. Issues of
Security Solutions Magazine.
popular hypothesis.
design, lead times, lag times, the
Risk analysis failure is an
load on the risk control system
inability to predict the potential
and the degree of gain introduced
or actual behaviour of an entity or
into the operational environment.
the likely occurrence of a random
Risk analysis failure and surprise
16 // SECURITY SOLUTIONS
securitysolutionsmagazine.com
Pedestrian and Vehicular Access Control Automation
FAAC Simply Automatic Modular automation solutions
HUB Parking Technology Smart and flexible parking solutions
Magnetic Automation Pioneering access control solutions
Experts in Access | Discover the FAAC Group range of products at J14 | www.faacgroup.com
LEGAL there is often very little left for payment to unsecured creditors. If, however, the directors of the company are deemed to have allowed the company to trade whilst insolvent (that is, to have incurred debts where the company had no prospect of being able to repay them), they can be held personally liable for those debts. This can mean that the liquidation
BY JUSTIN LAWRENCE
of the company might not be the end of the matter. Directors can be
THE LEGALITIES OF A FAILED BUSINESS
sued for those debts. The liquidator will only commence court action for insolvent trading with the financial backing of one or more creditors. If the court orders that the directors are indeed liable for those debts, the liquidator will have a number of recovery options available to him, including having the directors
o, you have received a
The receiver’s first duty is to
letter stating that one
the secured creditor. Much like a
enjoyed by the company from time
of your creditors has
mortgagee who takes possession
to time), then the receiver must pay
an undischarged bankrupt is
entered either
of and sells real estate following
the proceeds of sale in the following
automatically disqualified from
receivership, liquidation or
the default of a mortgagor, the
order: firstly to priority claims (such
managing a corporation or being a
`j
bankruptcy. We hear these terms all
receiver must ensure that the
as employee entitlements), secondly
director or secretary of a company.
jv
the time, but what do they actually
property is not sold for less than
to the secured creditor and thirdly to
A breach of this law can lead to
mean and, most importantly, what
its market value. If a receiver is
the company.
fines of up to $5,500 or one-
do they mean for the owners and
appointed to a company, it must
controllers of those businesses?
report to the Australian Securities
fails to gain sufficient funds
S
When a business is not
over all cash and stock-in-trade
If the process of receivership
declared bankrupt. Under the Corporations Act,
year imprisonment. If a person who is a sole director
and Investments Commission (ASIC)
to repay the debt owed to the
of a company becomes bankrupt,
succeeding it may firstly be placed
every six months as to the amount
secured creditor, the business (if
the company will be wound up,
into receivership. This means that
of its receipts and payments. Other
a company) will usually then be
irrespective of whether or not it has
a secured creditor has appointed
(unsecured) creditors are able to
placed into liquidation. In that case,
first been placed into liquidation.
an external party (the receiver)
obtain a copy of those statements
a liquidator will be appointed to
to administer the assets of the
from ASIC.
take control of all of the assets of
any business to do is to ensure
business. Usually, the business will
A secured creditor may hold a
Of course, the best thing for
the company and to sell them. The
that its financial position is such
continue to trade as normal whilst
‘fixed charge’ over the assets of a
proceeds of sale will then be paid
that the closest that it will ever
the receivership is underway.
business (that is, a charge over fixed
to secured creditors. Anything left
come to receivership, liquidation or
assets such as land, buildings, plant
over will then be divided between
bankruptcy is to read about them
hold security over some or all of the
and equipment). If those assets
unsecured creditors according
on the pages of this magazine. n
assets of the business. The secured
are sold, the proceeds of sale of
to their entitlements. This is the
creditor will often be a bank or
the charged assets must firstly be
often well-publicised situation in
other financial institution.
paid to the secured creditor and
which creditors receive ‘5 cents
with Henderson & Ball Solicitors
any balance will then be paid to
in the dollar’ or some similarly
and practises in the areas of
the company.
trifling amount.
commercial litigation, criminal,
The secured creditor will usually
The primary role of the receiver is to call in and sell as many of those assets as are necessary
If the secured creditor holds a
Once all funds are paid out, the
Justin Lawrence is a partner
family and property law. Henderson
to repay the debt owed by the
‘fixed and floating charge’ (that is,
liquidation will usually come to
& Ball have Law Institute of Victoria
business to the secured creditor.
a charge over all of the non-trading
an end and the company will be
accredited specialists in the areas
Once those assets are sold and
assets of the company – real estate,
wound up. The liquidator’s fees will
of business law, property law and
the secured creditor is repaid, the
plant and equipment, intellectual
be paid as a priority, so once those
commercial litigation. Justin and
receivership will usually end and
property rights, book debts,
fees and the costs of liquidation are
Henderson & Ball can be contacted
the business will continue to trade.
contractual rights – plus a charge
extracted from the sale proceeds,
on 03 9261 8000.
18 // SECURITY SOLUTIONS
securitysolutionsmagazine.com
`
j
v
`v
`jv
h
THE ALL-NEWTXF-125E BATTERY OPERATED QUAD BEAM Introducing the eagerly anticipated TXF-125E; a high performance Quad Beam sensor designed for battery operation - perfectly suited for rapid deployment in creating temporary or permanent secure perimeter intruder systems. With 4 selectable frequencies, multiple beam sets can be used without crosstalk, whilst adjustable detection distance allows a single beam set to be re-deployed in a variety of installations throughout its operational life. Two 3.6V (17Ah) batteries power each unit for up to 5 years of service.
NEW!
ACTIVE IR BEAMS The ultimate in trouble free perimeter detection for distances up to 200m outdoor / 400m indoor.
+61 (3) 9544 2477
email: oz_sales@takex.com
HIGH-MOUNT PIR Triple mirror optics for maximum detection performance at 2 to 6m.
BEAM TOWERS Rugged floor and wall mounted enclosures in 1/1.5/2/3m heights.
INDOOR PIR Spot, 360°, wide angle, and curtain detection from 2 to 4.9m height.
OUTDOOR PIR Hard-wired or battery operated outdoor PIR up to 180° x 12m .
1300 319 499 csd.com.au www.takex.com
TAKEX AMERICA
VIC: Mulgrave, Tullamarine NSW: Northmead, Waterloo ACT: Fyshwick QLD: Loganholme SA: Marleston WA: Balcatta
THINKING ABOUT SECURITY
CROWDED PLACES BY DON WILLIAMS
I
This table groups types of venues and considerations for managing crowds during a security/emergency event. Some facilities may contain a number of these venues, such as a shopping complex with cinemas and an indoor sports arena. The following are generalisations and the ability for patrons to escape or hide will depend on the specific built environment.
n 2017, the Australian New Zealand Counter Terrorism Committee (ANZCTC) released new
guidance on protection of crowded places (nationalsecurity.gov.au/Mediaand-publications/Publications/Pages/ default.aspx). This document is a significant improvement over previous ANZCTC guidance which had a strong law-enforcement bias with an emphasis on what would happen after police arrived, by which time it was probably all over. The 2017 guidance provided some useful self-assessment tools which, to the eyes of subject matter experts, may be open to debate but are of value to those seeking to establish a baseline and compliance with government expectations. The 2017 document also had an excellent section on resilience. As mentioned previously in this column, earlier guidance had little respect for owners and operators
Definitions: Good: Probable, is expected to happen or be available. Limited: Possible, might occur or be available. Poor: Unlikely, not expected to occur or be available.
of venues and contained many
facility management sectors have
staff. Once this is known, the relevant
to prevent (if possible) and certainly
statements of the blindingly obvious,
long been concerned with safety,
protective and response plans can be
to respond to mass casualty events.
reminding owners that they had a
security and response options.
assessed or revised. For example: an
It is unlikely that any place where
underground railway station has good
crowds gather has failed to plan; what
duty to protect those on-site. The
International associations
latest version at least recognises
such as ASIS International and the
communication with those on-site,
security advisors need to do is help
that owners and operators are not
International Association of Venue
but little capability to move or hide
them make sensible and practical
only aware of their responsibilities
Managers have thousands, sometimes
them; at a long linear event such as a
decisions and plans that not only fit
but have measures in place to deal
tens of thousands, of members and
parade or marathon, people can easily
within but support their particular
with them. The policy requires the
have established sub-committees
move away and possibly hide, but
operating environment. This is done
establishment of a Business Advisory
looking at these issues. Such
trying to communicate with everyone
by understanding their environment
Group and a Crowded Places Advisory
organisations could be a source of
along the track may be impossible
as well as fundamental concepts such
Group. Let us hope the voice of the
information to the ANZCTC. It would
and unnecessary; some sporting
as the ability to communicate, move
commercial sector is both heard and
also be of interest to know how many
and theatrical venues allow for easy
and hide. n
listened to.
members of the ANZCTC are members
movement of people, but others
of relevant professional associations.
result in the potential for crowd crush.
It also recognises that the professional and industry associations
While published guidance will
The ANZCTC has provided useful
Don Williams CPP RSecP ASecM is a recognised thought leader in
have a role to play. Unfortunately,
always be general in its nature, there
information and tools for those
security, emergency management and
according to the information flow
are a few basic concepts that may
owners, operators and advisors
related disciplines. His book Bomb
diagram, their role is to receive
help any venue. One step is to identify
responsible for the safety of people
Safety and Security: the Manager’s
information from government.
the ability of the venue or event
in crowded places. Obviously, all
Guide is available from Amazon.
Associations such as those for the
security to communicate and move or
venue operators need to continue
Don can be contacted via email
security, emergency, venue and
hide patrons, performers/athletes and
to assess and improve their ability
donwilliams@grapevine.net.au
20 // SECURITY SOLUTIONS
securitysolutionsmagazine.com
EVENTS
Security Exhibition & Conference 2018
leading suppliers. The 2018 show
government protective security
of the ANU Southeast Asia
is set to see some interesting new
in Australia to be updated on
Institute and, since March 2017,
25–27 July 2018
innovations, as well as a host of
urgent issues.
Acting Head of the Strategic
Melbourne Convention and
new attractions.
Exhibition Centre, Melbourne
Make sure you put the dates
The PSG Conference also
and Defence Studies Centre at
provides an opportunity for
ANU, overseeing its three-
In 2018, the Security Exhibition
in your diary. We look forward to
everyone involved in government
degree programs. He is also
& Conference is heading back
seeing you again in Melbourne in
security to network, update
a Senior Fellow of the Higher
to Melbourne.
2018 for the Security Exhibition &
knowledge and skills, and gain
Education Academy and Fellow
ASIAL Conference!
exposure to new trends and
of the Royal Society of New
technology, as well as hear
South Wales. In addition, he is a
directly from representatives of
member of the ANU Academic
days of quality networking and
the Protective Security Policy
Board as well as the Australian
unrivalled education alongside a
Framework (PSPF) review team
Army Journal editorial
about the reforms and what
board and an occasional
they mean.
commentator in the media. He
For over three decades, it has been
Protective Security in Government Conference and Trade Show 2018
the largest and most established
13–15 August 2018
is the collaboration between
commercial event for the security
National Convention Centre,
Australian Security Research
industry in Australia, bringing
Canberra
Centre and the Federal Attorney
together the entire supply chain of
The Australian Security Research
General’s Department to jointly
acknowledged leader in
manufacturers, distributors, security
Centre will this year launch the
develop content and a program
the field of human-based
professionals and end-users to
Protective Security in Government
relevant to today’s Australian
risk management and the
connect and create unparalleled
(PSG) Conference and Trade Show.
security professionals.
business opportunities.
The PSG Conference is designed to
The Security Exhibition & Conference is the industry’s annual opportunity to reunite for three
showcase of the most innovative solutions to the Australian market.
Visit securityexpo.com.au for more information.
A cornerstone of this event
Speakers at this year’s
fill the gap from where the Security
event include:
forward to once again reuniting
in Government (SIG) Conference
• John Blaxland, Professor of
more than 4,500 security
left off in 2016 and to provide an
International Security and
professionals with over 150
opportunity for those involved in
Intelligence Studies, Director
The entire team is looking
22 // SECURITY SOLUTIONS
is a US Department of Defense Minerva Research Initiative grant recipient. • Dr Gav Schneider, an
psychology of risk. • Scott Ryrie, CEO of the Risk Management Institute of Australia. • Mark Carrick, one of Australia’s most experienced
securitysolutionsmagazine.com
counterterrorism practitioners
performance. (This research can be
with more than 20 years of
found at perpetuityresearch.com/
law enforcement experience
wp-content/uploads/2014/09/
that includes crisis
Aspiring-to-Excellence.pdf)
management and response,
The OSPAs are being set-up
general policing, witness
in collaboration with security
protection, close personal
associations and groups across
protection, crime management,
many countries.
change management and counterterrorism intelligence. • Mr Sven Bluemmel,
By researching and standardising the award categories and criteria, the OSPAs scheme
the inaugural Victorian
provides an opportunity for
Information Commissioner.
countries to run their own
• Jason Brown, National Security
evidence-based OSPAs schemes
Director Thales and Chairman
while maintaining an ability to
of the Board at Security
compete on an international level
Professionals Australasia.
in the future – World OSPAs.
• Tony McGuirk CBE, QFSM, MSc,
Visit au.theospas.com for
FIFireE, FIIRSM, Director (Hazmat
more information or to make
and Specialised Support) at
a nomination.
NSW Environment Protection Authority (EPA). • Brett Dobbie, Protective Security at NSW Government. …to name just a few. Visit psgconference.com or
Australian Warrior Expo 2018 15–17 November 2018 Brisbane Showgrounds, Brisbane The Australian Warrior Expo
email info@psgconference.com for
(AWE) is Australia’s premier law
more information.
enforcement, military, emergency services and security expo and
The 2018 Australian OSPAs
is the only event of its type in
18 October 2018
showcasing the latest products,
Doltone House,
technology, equipment and
Hyde Park, Sydney
services to this niche market. The
The Outstanding Security
Australian Warrior Expo is not like
Performance Awards (OSPAs) are
any other trade show! With a huge
pleased to announce the dates
focus on hospitality, it includes a
Moresby, PNG, in March 2019 for
• intelligent traffic solutions
for the 2018 Australian awards.
VIP Night and an AWE party, plus
the first Oceania premier security
• asset management systems
They will be working for the fourth
a full retail store. AWE will bring
industry event, with a security
• drone capability
year in a row with the prestigious
both professionals and agencies
conference and exhibition, real-
• software cyber management
Australian Security Industry
together, including government
world challenges presented and a
Association Limited (ASIAL).
procurement managers, decision
glimpse into the future of global
• innovative video intercoms
makers and operators.
security integration and trends.
• large enterprise systems
The OSPAs recognise and reward companies and individuals across the security sector. They are
Australia. AWE is dedicated to
Visit australianwarriorexpo.com.au for more information.
designed to be both independent
The Congress will feature electronic security and safety solutions for aviation, banking,
solutions
• mechanical locking integration with electronic security solutions
and inclusive, providing an
SecTec PNG Congress
infrastructure, industrial sites,
• emerging technologies.
opportunity for outstanding
4–6 March 2019
mines, commercial buildings,
Do not miss out! Schedule, budget,
performers, whether buyers or
Port Moresby, Papua New Guinea
residential towers, building and
plan to be there and stay informed.
suppliers, to be recognised and for
Now is the time to plan to attend a
development; the best of the best
Early bird registration is open until
their success to be celebrated.
world-class security and technology
in world class offering:
12am 1st August 2018.
conference and exhibition – SecTec
• intelligent CCTV, access control
The criteria for these awards are based on extensive research on key factors that contribute to and characterise outstanding
securitysolutionsmagazine.com
PNG Congress. Security industry specialists and professionals will converge on Port
and alarms systems • advanced video surveillance solutions
Visit www.sectecpng.com/ register.html to register your interest or email info@sectecpng.com for more information. n
SECURITY SOLUTIONS // 23
FEAUSRE
STANDARDS INCREASING SECURITY Standards Australia has been contributing to Australian life for nearly 100 years. The growing emphasis on a secure society is placing more and more of the organisation’s projects into the security sector. With this comes a focus on areas of traditional security standards, as well as the need to be innovative in responding to the needs of the sector, including developing standards at an international level.
24 // SECURITY SOLUTIONS
securitysolutionsmagazine.com
Standards in the Sector
incidents, it is plain to see the
A number of projects in the
aspects of crowd management.
security sector are at different stages of development.
industry need for guidance in all Standards Australia is working with industry stakeholders to develop a handbook, SA HB
1. Building increased security
183 Crowd Management for
The physical security of buildings
Crowded Places. The handbook
has been the focus of a recent
intends to replace the common
proposal approved by Standards
industry practice of using
Australia, which will result
guidance not designed for the
in a handbook to guide those
Australian context, including
responsible for managing the
from Europe and particularly the
security of a physical premises.
United Kingdom, and give those
The handbook, Physical
responsible for managing crowds
Protective Security Treatment for
a one-stop document to help plan
Buildings Handbook, is intended
and respond to concerns relating
to collate resources and directions
to crowds.
of existing guidance. Ideally, the
The handbook aims to
handbook will provide advice to
work with industry to address
facility managers to proactively
the key issues of crowd
minimise the risk of security
management, being:
incidents and not just react to
• arrival
threats as they arise.
• ingress
Examples of physical security threats considered in this
• circulation • egress and dispersal.
handbook include vehicle attack, bombings and armed attack,
The proposal identified a lack
among many others. Given the
of planning and implementation
nature of these incidents, it is
before events as a key factor in
vital for those responsible for
injuries and fatalities at previous
security and design to be proactive
incidents. This risk was made
in keeping a facility and its
even more prominent in terms of
occupants safe.
risk assessment and emergency
The handbook will serve
management procedures, which
as an expert guide for security
will feature in the handbook being
professionals to use in assessing
developed. Some of the focal
and determining risk mitigation
areas are:
activities. While impossible to
• definitions and terminology
completely eradicate risk, all
• purpose of a crowd
available guidance being in one place is a step towards the security industry being provided a clear
management plan • risk assessment and identification
direction on as many challenges
• roles and responsibilities
as possible, backed by experts.
• crowd demographics and
2. Scaled up security
• site design
All of the complexities of security
• communication and
behaviour
are intensified when it comes to
• accessibility
events are taking place in Australia
• emergency and
and, with recent deaths and major
securitysolutionsmagazine.com
information
managing a crowd. More large-scale
incident management.
SECURITY SOLUTIONS // 25
FEAUSRE
The document will be
a secretariat responsibility of
Committee. The document is to
adjacent to the security sector,
structured in a way that gives
a Technical Committee for the
be presented at the next meeting
but one which will directly
the end-user clear guidance
International Organisation
in Norway at the end of 2018 and
impact a large number of
and practical steps to increase
for Standardisation (ISO), TC
will be used to assist in defining
security professionals across
security when dealing
292 Security and Resilience,
and contextualising these terms
the industry.
with crowds. Industry and
Standards Australia played host
in all ISO TC 292 documents.
government representatives
to the international gathering of
This group will also coordinate
screening was the centrepiece
have already come together to
this committee earlier this year.
with the United Nations’
of a forum recently held in
Cooperation Group to refine
Melbourne. With a change in
urban resilience.
the nature of work in Australia,
form a committee and work with
Sydney hosted 130 experts
The issue of employment
Standards Australia to push this
from more than 20 countries
handbook towards publication.
for meaningful dialogue on the
As is common practice for
international effort towards
can often appear to be long
standards in this space to
Standards Australia, before it is
security standards. This was
conversations with little gains, it
change with it. One of the early
published there will be a period
a particularly timely meeting
is a huge achievement to be able
identified areas of change is
of public comment to ensure the
for Australia with government
to have so many international
the shift from a methodology
entire security industry, and
and the private sector currently
experts in Australia developing
approach to one based on
the broader community, has a
working towards enhanced
guidance around best practice
principles. The need to ensure
chance to influence what this
security and resilience across a
for the security industry.
participants in an organisation’s
handbook will look like in its
number of common areas.
With interest already shown
entire workforce, not just those
by a number of government
deemed as ‘employed’, was also
conversations took place,
agencies and some of the
an important discussion in
Cybersecurity
with some of the topics
largest security firms in the
moving the standard forward
Organisations of every size
discussed being:
world, this meeting has a lot to
– taking account of Australia’s
and across every industry are
• continuity and organisational
deliver, but with some of the
changing workplaces.
final format.
placing a growing emphasis on cybersecurity. A number of international projects have
A wide range of
resilience • protective securities architecture and framework
been undertaken to respond to
• interoperability
this growing threat, resulting
• emergency management
in the development of a series
While international work
leading international experts
there is a clear need for the
The increasing role of data
involved there is little doubt it is
security and privacy was also
all achievable.
discussed as needing an update. This work is in very early stages, but it has drawn the attention
• community resilience
Not your Traditional Security Standard
of International Standards,
• security terminology
Despite working nationally
from government and the
ISO 27000.
• fraud risk
and internationally to develop
private sector – all of whom
standards for traditional areas
are eager for the standard to be
of security, there is also a
progressed quickly.
The ISO 27000 series provides
and countermeasures.
best practice recommendations on information security
Once the meetings came to
management within the context
an end, the delegates returned
of an overall information
home to discuss what is next
security management system.
for their respective countries.
Standards Australia has been
For Australia, forums are
working at an international level
planned to bring industry
to encourage more countries to
together and discuss what is of
adopt the use of this standard,
highest importance to Australia;
meaning the global digital
however, there was also one
economy will be better protected
particular piece of international
against the risk of cyberattacks.
work allocated to some of the Australian delegates.
An International Perspective on Security Standards
meeting was to develop a project
Standards Australia has
to study the terms “security” and
long been involved in the
“resilience”. Two Australians
development of international
will lead this work, following
standards, with security
on from their initial research
standards being a field of
and presentation of a draft
heightened activity of late. With
whitepaper to the Technical
26 // SECURITY SOLUTIONS
One of the resolutions of the team based on Australian work
of a number of key stakeholders
project being pursued in a field
Standards Evolve
While international work can often appear to be long conversations with little gains, it is a huge achievement to be able to have so many international experts in Australia developing guidance around best practice for the security industry.
Having been around for over 96 years, Standards Australia has seen changes in every sector and the standards being published have changed as a result. The security industry is one of many arenas in which technology is drastically shaping its future, and Standards Australia remains committed to addressing the traditional areas of security practices, as well as the new and exciting areas open to the industry. n Visit www.standards.org. au for more information on any of the standards mentioned in this article.
securitysolutionsmagazine.com
ALARMT
VOICE-OPERATED ALARM SYSTEMS
EXPECTED TO GROW AT A 7 PERCENT CAGR THROUGH 2022 BY ANNA SLIWON
28 // SECURITY SOLUTIONS
securitysolutionsmagazine.com
The Intruder Alarms and
comfortable using voice features,
to disarm the system, and the
Monitoring Services Database
residential professionally
the share of alarm systems relying
voice assistant then asks for
2018 study provides a
monitored intruder alarm
on more traditional methods
a security password or a PIN
comprehensive assessment of the
systems had additional
will decline.
code. The password feature was
intruder alarm and monitoring
connectivity and functionality
market, including a discussion of
beyond primary alarm
Smart Revolution
outside users’ homes could not
significant trends over the next
signalling, which will grow at a
Using voice commands to operate
instruct the systems to disarm.
five years. The report provides
CAGR of 17 percent to reach 35
intruder alarm systems makes the
This process could be improved
detailed estimates of market
percent by 2022.
process easier and quicker, as it
with the use of advanced
eliminates the need to physically
voice-recognition technologies,
• In 2017, 21 percent of
revenue and shipments from
added so strangers standing
2016, with a base year of 2017,
Our Analysis
interact with the alarm itself.
which would eliminate the need
and forecasts through 2022.
Home assistants developed by
With voice commands, there is
for dedicated passwords. The
It also estimates the market
Amazon, Google and others are
no need to locate a key fob or
system would instead use voice
share of major suppliers in each
changing how consumers interact
type a personal identification
biometrics to verify the user’s
product category.
with connected home devices,
number (PIN) code into a keypad.
identity, which could be done
including intruder alarms. More
Voice features can also be useful
automatically, thereby simplifying
Highlights
alarm systems now offer a voice-
when a keypad or a smartphone
the process.
• Globally, 92 percent of intruder
command option, allowing users
malfunctions, or if the key fob is
alarm systems sold in 2017
to use Alexa and other smart
misplaced. Likewise, arming the
currently occurs while users
were operated by either
assistants to arm and disarm their
system for the night can be done
are physically in their homes,
keypad or key fob; however,
alarm systems.
from a user’s bedroom, without
in-car entertainment systems of
the need to physically engage with
the future could also be used to
the security system.
disarm home security systems
this category is expected fall to 81 percent by 2022. • The share of voice-operated
Internet of Things (IoT) technologies have profoundly influenced the way consumers
Although voice interaction
on the road or while pulling into
alarm systems is expected
select home security systems,
Voice is here to Stay
to increase at a compound
leading to increased connectivity
Currently available voice features
annual growth rate (CAGR) of
and integration with voice
in intruder alarms offer a basic
Not an Easy Path
7 percent from 2017 through
assistants and other smart
level of interaction. The user
A number of challenges preclude
to 2022.
devices. As consumers get more
speaks a predetermined command
voice features from becoming
securitysolutionsmagazine.com
the driveway.
SECURITY SOLUTIONS // 29
ALARMT
a more popular method of
manufacturers integrate voice
can simplify interactions with
operating intruder alarms.
functionality of home assistants
assistants into their offerings,
the intruder alarm systems. One
For example, the need to
requires users to directly address
adding a smart device to an
way to overcome this hurdle is
use PIN codes prolongs the
their smart home assistants. On
intruder-alarm package may
to bundle products with smart
process. Some non-tech-savvy
a more advanced level, users
create an additional incentive to
devices, offering all the necessary
users might also struggle
would not have to directly
purchasing an alarm system.
configuration support needed to
to communicate with voice
address the voice assistant or
assistants, as they require the
the control panel to disarm the
manufacturers could attempt to
use of specific commands for
system; instead, once the assistant
acquire companies that specialise
the devices to listen. Another
recognised the voices in the
in voice recognition software
downside is their reliance on
household, it could automatically
– or partner with providers
IHS Markit. She has a background
home Wi-Fi connections to
disarm the system. However, this
of these products – to speed
in security and defence studies
connect and process commands.
type of functionality could lead to
the introduction of advanced
and has previously worked
If the home network goes down,
even more privacy concerns, as
voice features.
in a variety of research and
the assistant stops working.
smart devices actively listen for
Should voice recognition
Currently, the voice
house members’ activity.
become available in home alarm
On the other hand,
However, many current
facilitate a smooth transition to connected systems. n Anna Sliwon is an analyst for
analytical roles across security
users of intruder alarm systems
and weapons of mass destruction
are still reluctant to test the
(WMD) non-proliferation fields.
systems, additional privacy
Added Value
benefits of voice interaction
Anna has an MA in Intelligence
concerns will arise, including
Enhanced connectivity and
or connect smart devices
and International Security from
where the voice samples are
functionality have become
to intruder alarm systems.
Kings College London and a
stored – either in the cloud or
important differentiating
Installers will need to focus on
BA in International Relations
on local servers operated by
factors for intruder alarm
changing these perceptions by
and Security Studies from the
alarm companies.
systems. As more intruder alarm
explaining how smart devices
University of Bradford.
30 // SECURITY SOLUTIONS
securitysolutionsmagazine.com
| ACT
Â?
 �  �
With the new Protective Security Policy Framework taking effect in the second half of 2018, there is an urgent requirement to build knowledge and share information. The PSG Conference provides an opportunityfor everyoneinvolved in government security to network, update knowledge and skills, gain exposure to new trends and technology, as well as hear directly from representatives of the PSPF review team about the reforms and what they mean.
� � (   €
+ )
e: info@psgconference.com w: www.psgconference.com
‚ � � (   €
+ + Â Â? )
Â?
Â? Â? ( )
Brought to you by