Subscribe to

Blogs

New report on importance of corporate security

 - 
Thursday, September 20, 2012

The Conference Board’s Council Perspectives Report, out this month, focuses on security’s evolution into a value-added function since 9/11. The CSO’s role, the report says, is “more than ever, a business one … integral … a fundamental part of the business process … embedded in disciples like finance law, human resources, quality, supply chain, marketing and operations.”

Not big news to you folks, I know, but it’s nice to be validated by The Conference Board Council of Corporate Security Executives, right? The board developed its report using information from its CEO Challenge 2012 survey.

To meet challenges this year and beyond, the report says, “security leaders must continue to develop their business acumen and risk management skills.”

The report, “Leveraging Corporate Security for Business Growth and Improved Performance: The Transformative Effect of 9/11,” concludes, in part, that it is reliant on a company’s leaders, including the CSO, “to change any lingering perceptions that security is an imposition rather than an essential component of how you do business,” and that execs may still underestimate the role CSOs play in “promoting business growth and improving performance” so it is incumbent upon them to better understand that role and assemble the best team possible.

If you’d like a copy of the report, call The Conference Board’s customer service department at 212 339 0345 or email customer.service@conference-board.org.

What's up with this spate of campus bomb threats?

 - 
Tuesday, September 18, 2012

I've been reading up on the five bomb threats called in to college campuses in Texas, Louisiana, Ohio, and North Dakota last Friday and on Monday, forcing emergency evacuations—and lots of high blood pressure on the part of campus security, I'm sure.

Targets were:

University of Texas-Austin
Louisiana State University
North Dakota State University
Hiram College in Ohio
University of Texas-Brownsville

I'm hoping to do a round-up article for Security Director News on how security and evacuation procedures were carried out, how successful they were and any problem areas that were revealed. Anyone with something to contribute is most welcome to do so. Just give me a shout at acanfield@securitydirectornews.com.

Topic: 

TSA’s PreCheck program growing; have you signed up?

 - 
Tuesday, September 18, 2012

The TSA continues to expand its PreCheck program at some of the nation’s largest airports, most recently at Philadelphia and Washington Dulles. My frequent-flyer colleague was approached in Philly last week upon departing from the ASIS 2012 show to see if she was interested in applying. Yesterday, Dulles set up information booths about the program and application process.

The pre-screening initiative makes risk assessments on passengers who voluntarily participate before they arrive at airport checkpoints, the TSA says. Eligible fliers include those U.S. citizens who already are members of existing Customs and Border Traveler Protection programs, including Global Entry, NEXUS and SENTRI, as well other certain frequent fliers.

It really would be nice not to have to take off shoes, belt and jacket, and pull out your laptop and remove your tiny toiletries from your bag, would it not? Travelers who are approved are directed to an expedited security lane.

Have you signed up yet? More than 2.7 million passengers have, according to a report from eTN Global Travel Industry News. With PreCheck in operation at 26 airports, TSA expects to have nine more airports participating by the end of the year. I’m interested in hearing participants’ experience with the program, so please let me know. Comment below or email me at acanfield@securitydirectornews.com.

Tags: 

There's still time for "20 Under 40" nominations

 - 
Thursday, September 13, 2012

I’ve just been looking through the submissions we’ve received for Security Director News’ “20 under 40” list, which will recognize security’s current and future leaders who are age 40 or younger. The entries so far are great, and it will be hard to choose. But there’s still time—until Oct. 5, tick, tick, tick—to submit for recognition your choice for security end users who display excellent leadership qualities, technical know-how, business sense and a commitment to the security industry.  

The Security Director News staff, in consultation with industry members, will select the 20 individuals we feel best represent the future of the security industry and profile them on our website (www.securitydirectornews.com) in December. Who are your young, talented employees who will step up to senior-level security positions in the coming years? Who are the younger individuals who are already at the forefront of the industry? Go to  http://vovici.com/wsb.dll/s/3cdcg4e236 to submit an entry. It’s not necessary, by the way, for a candidate to have a specific title or responsibility within a company. Individuals featured in Security Director News' past "20 under 40" features are not eligible, however.

For an opportunity to rub elbows with these up-and-coming security leaders, Security Director News and Security Systems News will host a "20 under 40" reception at our TechSec conference, which will take place Feb. 5-6, 2013, in Fort Lauderdale. Much more about that later.

Meanwhile, send us your “20 under 40” candidates! If you have any questions about nominations, or any other questions for that matter, please don’t hesitate to call me at 207-846-0600, Ext. 227, or by email at acanfield@securitydirectornews.com.

Day 2 at ASIS

 - 
Wednesday, September 12, 2012

Day 2 at ASIS 2012 at the Pennsylvania Convention Center in Philadelphia started off with a focus on the massive convention center itself. I attended a panel discussion on the center’s recent security upgrade and then a tour to see some of those changes, furnished, installed and coordinated by Schneider Electric. Schneider and convention hall officials led us behind the public areas of the center, pointed out camera positioning and access control, showed us their perimeter control and then let us into the command center for a view of the inner workings. A lot of work goes into securing a 1-million-square-foot building always bustling with thousands of visitors per day.

Next, I visited with Karen Evans, president and CEO of Sielox and heard about her company’s new release of  Pinnacle 9 and integration with Salto wireless locks and with Ingersoll Rand’s Schlage Wireless AD-Series.

JuliAnn Tuleya, marketing communications manager of Brivo Systems gave me a brief tutorial on CloudPass for the federal access market, as well the company’s other cloud solutions.

At IQinVision, Wendi Burke, director of global marketing solutions, was kind enough to fill in a neophyte (as in me) on her company’s high-res cameras and their role in the marketplace.

Then I went to a panel presentation sponsored by Ingersoll Rand on its new NFC “mobile key” implementation on the campuses of Villanova University and the University of San Francisco. A select number of students in the early test runs have downloaded their dorm access credentials onto their iPhones and no longer need to swipe a plastic card to enter their buildings. They are also able to use their iPhones for certain purchases, such as in the cafeterias, for laundry services, at the copy center, and so on. Feedback has been extremely positive, university reps on the panel said.

Finally, I had a chat with Leigh McGuire, the learned ASIS marketing manager. I’m sure she’ll be a helpful source to me, as she has been in the past to my colleagues at Security Systems News.

It was a whirlwind trip, especially with me being new to the industry, but I appreciate everyone’s patience and the time they took to fill me in on their place in the marketplace and their impact on end-users.

Day 1 at ASIS

 - 
Tuesday, September 11, 2012

Among the dozens of people I spoke to on my first day—and first time—at ASIS 2012 were members of the HIS End Users Committee executive committee, who were at the show to recruit new members, and very enthusiastically, I might add.

Rudy Wolter, director of North America security and investigative services at Citigroup, chairman of the group, along with his colleagues, Scott Thompson Sr., director of security engineering and technical systems at Novartis, and Sonora Henderson-Stermer, security operations administrator for Yahoo, had nothing but positives to say about the group’s relationship with Honeywell.

“Honeywell 100 percent answers back to the end user,” Wolter said. “It all comes down to communication.”

The group got its start about 10 years ago with about 10 members, now has 70, and it’s looking for more end-user customers of Honeywell’s Pro-Watch.

Tony Foglia, director of global accounts for Honeywell, said 70 percent of the issues the group has raised have been addressed by the company. “It’s a collective voice into our R&D efforts,” he said.

Members are in regular contact and meets twice annually, both in vertical groups and mixed vertical groups.

Hello!

 - 
Friday, September 7, 2012

I’m Security Director News’ new managing editor, and it will be my pleasure to get to know you and your companies. I’ll be at ASIS next week and hope to meet as many people as I can and learn more about this fascinating industry. I hope you’ll be patient with me while I get my sea legs under me, as we say here in Maine. Your world, your work, your devices, they’re all new to me, but I like to think I’m a quick study.
 
My background is in writing and editing. I’ve worked at newspapers in Florida, Vermont and Maine, and have done freelance work for a number of others, including the Miami Herald. As a journalist I’ve worked with a wide range of topics, from small business to banking to education, local crime and punishment and pretty much everything in between. I’ve also been a book editor, press release producer, ghostwriter and a mom (well, that last one is ongoing.)

Again, I’m excited to be here. Security professionals, I hope to provide you with news and insights from others you can use on the job. I’d love to hear from you, so let’s be in touch. Please feel free to contact me at any time to introduce yourselves and pitch story ideas. I can be reached at (207) 846-0600, ext. 227, or at acanfield@securitydirectornews.com. Let’s chat soon!
 

Topic: 

Disruptive Public and Shareholder Protests: Recognizing Lawful and Unlawful Conduct and Managing Company Liability

 - 
Friday, August 10, 2012
Norman Spain
Professor of Safety, Security and Emergency Management at Eastern Kentucky University

 

NOTICE: This commentary is for general education purposes only and is not intended as legal advice. Readers in need of legal advice should consult with competent legal counsel.   

There is a public demonstration on the sidewalks and plaza outside the shareholders meeting. An emotional speaker on a megaphone is calling for sweeping changes as he leads a small breakaway group of activists, some wearing shareholder badges, who are defiantly chanting and carrying signs as they walk towards the security staffed meeting entrance. A confrontation is brewing. The media is watching. Several persons are video recording on cellphones.  

At times public demonstrations appear inseparably interwoven with private shareholder protests. Outside, non-shareholders and activist shareholders are calling for public policy changes. Inside activist shareholders are advocating for similar changes in short term company policies that create excessive wealth for a few, devalue human and worker dignity, and degrade the environment.

Activists are passionate. They are deeply committed to change the practices they perceive to be wrongful. They understand the value organizational reputation and power of public perception. They are highly motivated to attract and leverage public opinion to force governments and businesses to change today.

Security directors cannot overlook the willingness of some activists to engage in passive (e.g., sit-ins) and/or overt conduct intended to force a security and/or law enforcement response. It is both strategy and tactic. It can be a powerfully persuasive gambit in a digital world if the responses are perceived by the public to be heavy-handed.  

Where are the lines for activists and officers between lawful and unlawful conduct? How can the company manage this liability?

Freedom of Expression

The 1st Amendment of the U.S. Constitution provides: "Congress shall make no law ... abridging the freedom of speech, or of the press; or the right of the people peaceably to assemble, and to petition the Government for a redress of grievances." The courts have extended freedom of expression to the states by application of the 14th amendment prohibitions: "No state shall make or enforce any law which shall abridge the privileges or immunities of citizens ... nor deny to any person within its jurisdiction the equal protection of the laws."

Freedom of expression is a fundamental, but not absolute, right of the people. The inciting of violence is not protected free speech. Nor are all government properties public forums. However, sidewalks, plazas, parks and similar areas historically used for public pronouncements and debates are protected traditional public forums. The government may regulate freedom of expression in traditional public forums as to time, place and manner of conduct. The regulations must be for compelling government interest (e.g., public safety), narrow in scope, and viewpoint neutral. (An excellent general resource: http://www.law.cornell.edu/anncon/html/amdt1toc_user.html)

The public's right of freedom of expression in traditional public forums does not translate into a right to block access, enter upon private or other public property, and/or to disrupt the use of the property for its intended purposes. Such conduct is potentially criminal in nature.

Activist Criminal Conduct

While state statutory language differs, criminal trespass and disorderly conduct are probably the most frequent offenses committed by activist shareholders. Vandalism and resisting arrest are issues too. More serious offenses are wanton endangerment, and assault and battery.

Proof of a criminal trespass generally requires notice by the owner or representative, and/or signage that says the property is private or restricted, that the individual cannot enter or remain, and is given reasonable opportunity to depart. Disorderly conduct refers to a range of behaviors disruptive of the public peace and peaceful enjoyment of property.

A company may restrict access to a shareholders meeting held on company property. Similarly, a hotel or conference center may restrict public access, however, common areas such as lobbies and restaurants are often kept open to the public for the intended use. Protestors who knowingly without authorization attempt to enter or remain in restricted areas, or who have authorized access but become disruptive in common areas OR IN shareholders meetings, may be subject to arrest and removal for trespass and/or disorderly conduct.  

Protestors who deface or destroy property may be subject to arrest for criminal vandalism. Those who recklessly throw dangerous objects may face charges for wanton endangerment. Criminal assault and battery claims may be filed against protestors who grab, hit or throw objects at others; and those who resist lawful arrest may be subject to resisting arrest charges.

Legal Risks for Security Professionals

Most lawsuits filed against security officers are tort claims under state law. Whereas a crime is an offense against the public, a tort is a civil violation against the personal and/or property rights of another who may seek judicial relief. Officers are at heightened risk when using force and making private party (i.e., citizen) arrests. Note, a few torts and crimes share the same or similar names.

A tortuous assault occurs when one party intentionally creates a reasonable apprehension in the mind of another of an imminent battery. Battery is an intentional touching of another that is highly offensive to a reasonable person. An officer who uses excessive force to block a protestor from entering or to remove a vocally disruptive activist shareholder may be sued for assault and battery. An infliction of emotional distress claim might be made if the officer's conduct is outrageous and highly likely to inflict distress upon another, e.g., repeatedly hitting another.

False arrest is arrest without sufficient probable cause for a reasonable person to believe the suspect committed a crime. False imprisonment occurs when one party without justification denies another voluntary freedom of movement. Malicious prosecution requires proof that a party with malice and without probable cause initiated a criminal proceeding that was terminated in favor of the accused. A security officer who without further inquiry forcefully grabs and detains for trespass a known activist shareholder who was not being disruptive may face a lawsuit for assault, battery, and false imprisonment. If he arrests the activist shareholder, the officer may also face false arrest and malicious prosecution claims if the criminal charge is dismissed with prejudice (i.e., cannot be re-filed).  

When officers are sued, security managers are at risk of being sued for negligent training and negligent supervision for failing to assure the officers competently performed their duties. Managers may also be sued for negligent security for failing to provide overall reasonable protection if innocent parties are injured.

At a security checkpoint, a shareholder may claim a frisk by an officer of the opposite sex was a highly offensive intrusion upon privacy. An individual wearing a colostomy pouch might claim publication of a private fact if verbally coerced to show the pouch in an open versus private screening area.

Managing Company Liability

According to risk management theory, risks may be retained, reduced and/or transferred. These are the same options for managing security liabilities.

The legal doctrine of "respondeat superior" holds that a company may be held vicariously liable for the intentional and negligent conduct of its employees committed within the scope of employment. By deploying its officers the company retains liability.  It can reduce this risk by providing officers supervision and training on their authority and protocols for using force and making private party arrests. It can transfer some risk by obtaining insurance, however, intentional harms caused by the insured (e.g., assault) are frequently excluded from coverage.

A company can transfer liability by outsourcing security. Under the independent contractor rule a company is not liable for acts of an independent contractor and its employees. There are exceptions if a company reserves or exercises too much control over the security provider's officers. Also, companies today prefer to allocate liability risks in the contract for services. Minimum insurance requirements with named beneficiary; indemnification for losses suffered; and hold harmless for injuries caused are typical topics addressed.

Another transfer option is to directly pay a city for supplemental police coverage to handle disruptive persons. A company reduces liability exposure when the city assigns and supervises the officers who are trained to follow police protocols. Another benefit, if injured the officers are more likely to be covered by the city's workers compensation. When a company directly retains the services of police officers the issues of insurance coverage and whether they are acting as police officers and/or agents of the company may be more open for review by the courts.

In conclusion, public demonstrations and shareholder protests raise reputational and legal risks. Security directors should in consultation with legal counsel develop shareholder meeting security plans in advance long before the activists are approaching the entrance.

Disruptive Public and Shareholder Protests - Recognizing Lawful and Unlawful Conduct and Managing Company Liability

Norman Spain, J.D., is Professor of Safety, Security and Emergency Management at Eastern Kentucky University.

Speaking of Security: A new monthly blog for SDN

 - 
Thursday, August 9, 2012

Editor's Note: Christopher Walker, a Professor and Director of Security Studies at Northeastern University, is a new regular contributor for Security Director News. In his new monthly guest blog, "Speaking of Security," Walker will explore the security profession and its integration with the wider world of business. He'll bring his perspective gained from his years as a law enforcement officer, a chief security officer in the private sector, and his time in academia. He also holds a doctorate in business administration.

Not surprisingly, as with the tragic events of 9/11, the shooting in Aurora, Colo., has brought out many security “experts” who opine how the shooting might have been prevented or mitigated (even my son’s martial arts instructor has an opinion). What is also unsurprising is that, without knowing what security or risk mitigation programs might have actually been in place, the company that owns the movie theater has been judged by many to have failed to secure its environment against a violent attack. Perhaps, it did. But that is an issue to be addressed in the courts. And, it will be. Both sides will have their various experts testify and the most compelling legal argument may not win. I understand this as a former court-qualified expert witness in negligent security. I say “former” because that was only a temporary role and never how I made a living. What I do now is more mundane. I educate. I do it in the classroom, in executive education programs, as a consultant and will now seek to do some variation of it for Security Director News. More specifically, I have been asked to create an ongoing column that will appear in SDN roughly once a month, depending on interest—yours, mine and the editor’s.

I want to be clear why I agreed to do this column. I am not selling anything. I have no agenda beyond informing and, if I am lucky, educating. To what end? Well, if security is to be recognized as a profession within the business community, it will not be by establishing security standards or developing technical expertise. It will be the result of understanding more fully the world of business. Consequently, no matter what security related topic I write about, it will always come back to the basic point that security practitioners must help businesses operate more efficiently and effectively. And, to be clear, these are two very different concepts. But, I will save that discussion for another day.

Understandably, there is a tendency to question the credibility of a writer or speaker who posits an opinion.  In truth, one of my biggest irritations comes from the so-called security experts who, absent any real business experience, base their claims on years in law enforcement or the military. Somehow, the media find these people credible on the topic, often because of the position or rank they once held. I do not. While I respect this prior experience, it is not business experience and that anyone might conflate the two is, well, ignorant of the realities of business. This leads me to the credibility question that may well have formed in your mind—Just what does this guy bring to the table? Or, as someone once asked me, why should I listen to you?

As simply said as possible, my perspective is born of ten years in law enforcement, twelve years with a global firm (nine as the CSO responsible for global security in a multi-billion dollar division), and six years as a full-time professor at Northeastern University, where I got the job because I hold a doctorate degree in business. This is not an attempt to say my resume is better than yours; rather, it is to suggest that I might offer a different point of view.

So my commitment to the reader is simple; I will not shy away from weighing in on topics that deserve discussion, even if not agreement. While I will try to be fair, undoubtedly I will offend, irritate, or otherwise bother some readers. But, there is nothing wrong with that. Just like medicine and law, security is a field that needs much debate and discussion. In fact, without it there would be no growth and improvement. As anyone in the field of technology knows, innovations do not occur because something is bad, but because it can be better (think landlines being replaced by cell phones; which, in turn, are being replaced by smartphones with countless apps). At its heart, my effort will seek to generate thinking and discussion. And, speaking of that…

ASIS International's global conference will take place in Philadelphia in September and a number of speakers will offer their insights and opinions, based on their education and experience. I will be among them. More by accident than design, I will speak at two sessions. A member of ASIS for more than 25 years, it has been my privilege to speak at a number of their conferences in a variety of countries. So, I welcome your attendance and feedback. As with this column, I will try to be interesting, even if disagreeable. I will never have all the answers, nor will I pretend that I do. On the contrary, what I am more likely to have are tough questions. As Theodore Geisel (Doctor Seuss) once said: “Sometimes the answers are easy and it is the questions that are complicated.”

--

Christopher Walker is the former Executive Professor of Strategy with Northeastern University's College of Business Administration and now Professor and Director of Security Studies at the university's College of Professional Studies. Prior to entering academia, Walker served 10 years as a law enforcement officer, followed by nearly a decade as CSO in charge of global security for a multi-billion dollar division of a Fortune 50 company. He also holds a doctorate in business administration.

Japan testing biometrics at airports

 - 
Wednesday, August 8, 2012

Since biometrics is a major topic of discussion among security professionals, especially when it comes to its use in the public sector, I wanted to mention some news coming from Japan this week.

It seems that two major airports near Tokyo have begun testing a new biometric identification system. Immigration officials at Tokyo's Haneda airport and Narita airport in Chiba Prefecture beginning this week will take photographs and fingerprints of traveling Japanese citizens who give their approval and compare them with the biometric data stored on their electronic passports, according to The Japan Times.

The pilot is scheduled to last until Sept. 30, after which the results will be reviewed to determine how accurately machines are able to use biometric data to identify travelers.

It still feels like a movie, but it's only a matter of time until the TSA agent checking my passport will be replaced with machine taking a photo of my iris and comparing it to the binary iris code contained on my passport.

Pages