In the dynamic world of IT and security, the concept of BYOD (Bring Your Own Device) has revolutionized how organizations manage employee devices. Today, a new evolution in this paradigm is emerging: BYOC (Bring Your Own Credential). This innovative approach promises to transform access control systems, offering enhanced security, privacy, and efficiency. As users bring their own access credentials on mobile devices to system owners, BYOC mitigates the need for organizations to issue new credentials and aligns with stringent data protection regulations like GDPR and CCPA.

Understanding BYOC

BYOC is a model where individuals use their personal mobile devices to carry access credentials, which can then be integrated into an organization’s access control system. This shift not only simplifies the process of credential management but also places greater control over personal information in the hands of the user. Unlike traditional methods where access credentials are issued by the system owner, BYOC allows users to maintain their personal data, thereby enhancing privacy and compliance with data protection laws.

The Mechanics of BYOC

The BYOC model operates through a series of streamlined steps:

1. Credential Creation: Users generate access credentials on their mobile devices through a secure app. These credentials can be encrypted and stored safely on the device.

2. Credential Submission: When a user needs access to a system, they present their mobile device to the system owner. The credential can be shared via QR codes, NFC (Near Field Communication), or secure cloud-based exchanges.

3. System Integration: The system owner integrates the provided credential into their access control system, granting the user the necessary permissions without issuing new credentials.

4. Revocation and Updates: Users and system owners can update or revoke their credentials directly from their devices or on the access control system, providing a dynamic and responsive approach to access management.

So why should we be considering BYOC?

Consider these points:

Enhanced Security – BYOC leverages the advanced security features of modern mobile devices, such as biometrics, encryption, and secure storage. By doing so, it reduces the risk of credential theft or duplication. Since the credentials are not stored in a centralized database, the attack surface for potential breaches is minimized.

Improved Privacy Compliance – Data privacy regulations like GDPR (General Data Protection Regulation) and CCPA (California Consumer Privacy Act) require stringent controls over personal data. BYOC inherently supports these regulations by allowing users to retain control over their personal information. Since credentials are created and managed by the user, there is less risk of personal data being mishandled or exposed during the credentialing process.

Cost Efficiency – Issuing and managing physical access credentials can be costly and time-consuming for organizations. BYOC reduces these overheads by shifting the responsibility of credential management to the user. This not only lowers costs but also simplifies administrative processes associated with credential issuance and maintenance.

User Convenience – Users benefit from the convenience of carrying access credentials on devices they already use daily. This eliminates the need to manage multiple physical cards or fobs, streamlining their interactions with various access control systems. Additionally, updates to credentials can be made in real-time, enhancing user experience and reducing downtime.

Implementing BYOC does have its Challenges

When considering this approach to credentialing you should be aware of some key factors that could impact adopting the technology.

Technical Compatibility – For BYOC to be effective, access control systems must be compatible with a wide range of mobile devices and credential formats. This requires investment in technology that can interface seamlessly with different operating systems and communication protocols.

Security Assurance – While BYOC offers enhanced security features, ensuring these are robust and effective is crucial. Organizations must implement rigorous security protocols to protect against potential vulnerabilities in mobile devices and credential transmission processes.

User Training and Support – Adopting BYOC involves a cultural shift for both users and system administrators. Comprehensive training programs are essential to ensure all stakeholders understand how to create, manage, and use mobile credentials securely. Ongoing support must be provided to address any issues or concerns that arise during the transition.

Regulatory Compliance – Despite its inherent advantages, organizations must still ensure that their BYOC implementations fully comply with relevant regulations. This involves regular audits and updates to policies and procedures to align with evolving legal requirements.

As the digital landscape continues to evolve, the adoption of BYOC is likely to grow. Its potential to enhance security, privacy, and efficiency makes it an attractive option for organizations. Looking ahead, several trends are poised to shape the future of BYOC.

The Internet of Things (IoT) is expanding rapidly, and BYOC can integrate seamlessly with IoT devices to offer even more streamlined access control solutions. For instance, smart locks and other IoT-enabled access points can interact directly with mobile credentials, further simplifying user interactions.

Artificial Intelligence (AI) and Machine Learning (ML) can be employed to monitor and analyze access patterns, identifying potential security threats in real-time. These technologies can enhance the overall security posture of BYOC implementations by detecting anomalies and enforcing dynamic access controls.

The paradigm shift to BYOC represents a significant advancement in access control systems. By enabling users to bring their own credentials, organizations can enhance security, improve compliance with data protection regulations, and reduce costs. While challenges remain, the potential benefits of BYOC make it a compelling option for advancing access control systems. As technology continues to evolve, BYOC is set to become a cornerstone of secure and efficient access management in the digital age.

This article originally appeared in the聽听辞蹿听.聽Paul F Benne is the President of 杏吧原创 and has over 35 years in the protective service industry.

The post Tech Trends: BYOC to Usher in a new era in access control appeared first on 杏吧原创.

Unfortunately, workers aren鈥檛 getting the training they need and want. As I mentioned in my last post, 70% of employees say they don鈥檛 have mastery of the skills they need to do their jobs. In that post, I also talked about how too many management teams treat employee training as an exercise in box-checking rather than a mechanism to deliver meaningful results. As a result, employees become frustrated, fail to thrive, and ultimately quit. Then, the replacement hires undergo the same superficial, ineffective training, and the cycle continues.

We鈥檝e defined the problem. Now, let鈥檚 focus on the solution.

Understanding Learning and Forgetting Curves

Most people are familiar with the concept of a learning curve. It鈥檚 a graphical representation of how performance progresses over time as a student learns and practices. Easy-to-master repetitive activities, like data entry, show fast initial gains that quickly level off. More complex tasks have wiggly learning curves, where students progress significantly, then taper off while skills sink in before the curve tics upward again. Management understands that learning curves differ by subject, and some training takes longer before workers reach acceptable proficiency.

Fewer people are familiar with the forgetting curve, but it鈥檚 even more important than the learning curve when desigining effective training programs.

The forgetting curve was developed by psychologist Hermann Ebbinghaus, whose experiments over a century ago showed that human memory retention drops quickly and dramatically after learning new information. People forget 50% of what they鈥檝e learned within an hour of training, 75% in six days, and 90% after a month. Therefore, useful training programs require reinforcement of previous lessons as new information is taught. Imagine the futility of trying to learn a foreign language if you only focused on new vocabulary during every class.

In addition, skill reinforcement requires practice and follow-up after the initial training concludes. You may have taken four years of high-school Spanish, but how much did you retain just a few years after graduation if you never spoke it? A one-time class, regardless of its length, will not be effective if the skills taught are not integrated into a worker鈥檚 routine and supplemented with refresher courses and new, updated material over time.

Types of On-Going Training

There are several proven approaches that advance learning outcomes. They include:

Physical Exercise: Physical repetition of tasks, building in complexity, reinforces muscle memory so that required actions can be executed more quickly and with less effort.

Successive Learning: Revisiting and practicing tactical skills and procedural protocols over spaced sessions is effective for developing complex skill sets that build upon each other.

Spaced Practice: Studies have shown that frequent short learning sessions are more effective than longer, less frequent sessions. Frequent sessions help transfer knowledge to long-term memory, resulting in superior recall and retention.

Security Industry Application

Ignoring the realities and consequences of the forgetting curve is perilous in the security industry. Employees who don鈥檛 remember what was taught may fail to identify, mitigate, or respond to a security threat as their job requires.  

For example, let鈥檚 look at video management systems (VMS). At the most basic level, security guards engage with a VMS while sitting at their post, watching a grid of rotating surveillance views. By all accounts, it鈥檚 a pretty dull job.

So, what happens when a severe threat arises, like protesters storming the building? The situational awareness derived from VMS is critical to coordinating the security team鈥檚 response. Can the guards quickly search for video clips based on specific parameters? Can they export video to share with law enforcement?

The guards may have learned how to use more sophisticated features of the VMS platform, but that was a while ago, and the steps have not been practiced since. Plus, the guards are now under pressure. Even if they recall some of what they learned, their navigation of the VMS menus will be slow, with some trial and error, rather than the seamless operation that comes with muscle memory. With threats coming from multiple directions, how do they make sense of the situation and prioritize action steps? They have little or no practice making crucial judgment calls in stressful emergencies. Imagine how much more confidently they could respond if theses skills had been reinforced through regular training.

Active shooter and de-escalation training also require practice, and reinforcement. You hope your team will rarely need these skill sets, but if they鈥檙e not practiced frequently, they鈥檒l get rusty and fail to deliver when most needed. I could mention many other examples, but they all follow this same pattern. Without on-going training, security teams are ill-prepared to deal with crisis.

Training Resources

The most obvious person to train an employee is that employee鈥檚 manager, but managers don鈥檛 always have the learning and development knowledge and experience to do it effectively. Management training can help those in leadership positions to be better mentors to their subordinates, but teaching specific skills 鈥� in depth 鈥� may not be the best use of the manager鈥檚 time.

Fortunately, training is readily available through professional organizations like ASIS, SIA, PSA, ESA, and others. Certain licensed employees must earn continuing education credits to maintain their status, but all workers benefit when required to keep skills current 鈥� and offered educational resources to do so. Eligibility for such training is a perk of professional association membership.

Training is available elsewhere, too. Equipment manufacturers offer certification courses on their technologies. System integrators typically include customer training with the systems they install. Security consultants are staffed with industry experts who can provide customized training courses based on an organization鈥檚 specific needs and align that training with broader risk management initiatives.

In short, don鈥檛 let the grim statistics on the state of training deter your organization鈥檚 efforts to implement an effective L&D program. The reasons that training is often ineffective can be overcome by focusing on how employees learn and why they forget. With repetitive, reinforced learning and continuing education, your security team members will be equipped to perform optimally, even in adverse conditions, using the full range or resources at their disposal.

The post Unlocking Success in Security L&D Programs appeared first on 杏吧原创.

In considering this technology, it鈥檚 important to evaluate the pros and cons of using it in an application. While the benefits may be clear, you should objectively review the pros and cons I explore in this article to help guide you in the decision-making process of using the technology.

Creating an environment that disorients and limits visibility of an adversary can be a significant deterrent and limit the negative outcome of a security incident. Consider these pros of security foggers:

Immediate Deterrence and Disorientation – When activated, fog generators quickly fill the protected area with thick fog, often within seconds. This sudden loss of visibility can scare intruders, causing them to flee immediately. The dense fog significantly hampers an intruder’s ability to navigate the space or identify targets, reducing the likelihood of theft or vandalism.

Rapid and Active Response – Fog generators are designed to activate swiftly once triggered. This can be from an automatic intrusion detection or from a manual trigger of a security device. This rapid response time is crucial in preventing the intruder from accomplishing their objective. While traditional alarms may only alert and possibly scare off intruders with sound, fog generators add a physical barrier, enhancing the overall effectiveness of the security system.

Non-Lethal and Safe – The fog produced is typically non-toxic and safe for humans and pets, ensuring that it doesn鈥檛 cause harm to innocent parties while still being effective against intruders. Unlike some other security measures, fog generators do not cause structural damage or leave lasting residues, making them suitable for protecting valuable assets without the risk of collateral damage.

Versatility and Coverage – Fog generators can be used in a range of environments, from small retail shops to large warehouses. They are adaptable to different spaces and security needs. Modern fog generators are capable of covering large areas quickly, making them effective even in expansive spaces.

Integration with Existing Systems – Fog generators can often be integrated with existing alarm, access, video surveillance systems, and other security measures, providing a comprehensive security solution without the need for a complete overhaul.

Psychological Impact – The psychological 鈥渇ear-factor鈥� effect of suddenly being enveloped in fog can be powerful. Intruders may panic, leading to hasty retreats and increased likelihood of apprehension by law enforcement.

As with any technology, it鈥檚 important to understand the potential downside. This will allow you to balance if the benefits outweigh the risks in its application. Consider these possible cons to the technology:

False or Delayed Activation – There is a risk of false alarms triggering the fog generator, which can result in unnecessary disruptions and the need for cleanup; even if no residue, exhausting the fog from the air requires specific effort. While there are ways to mitigate this by having remote alarm verification, this can add significant time into triggering the system, limiting its effectiveness.

Frequent Testing and Maintenance – To ensure reliability, any security technology, including fog generators, should have regular testing and maintenance. This can be prohibitive given how this technology works.

Limited Duration of Effect 鈥� Security foggers are a temporary measure. The fog is effective only for a limited time. Once it dissipates, normal visibility is restored, potentially allowing intruders to resume their activities if they manage to wait it out.

Life Safety and Health Concerns 鈥� These systems rapidly fill an environment with dense zero-visibility fog. In some scenarios, the sudden deployment of fog can create hazardous conditions for any occupants, making evacuation difficult. This technology may not be approved by the Authority Having Jurisdiction (AHJ); therefore, approval from the AHJ should be sought before installation.

Health Concerns – While generally safe, there can be concerns for individuals with respiratory issues or allergies. While the manufacturers of the technology indicate that it is safe, actual 3^rd party testing should be reviewed and disclosed to system owners prior to installation.

Training and Usage – Security personnel and staff need proper training to effectively handle and respond to fog generator activation. In reality, if this technology is activated it will be displacing to both employees and adversaries. So, a training protocol with regular reviews is critical to ensure the proper response and recovery of an activation.

False Sense of Security – Over-reliance on fog generators might lead to complacency in other areas of security, potentially creating vulnerabilities if the system fails or is bypassed.

Fog generators present a unique and effective addition to security systems, providing immediate deterrence and disorientation to intruders while being safe and non-lethal. Their rapid response, versatility, and ability to integrate with existing security measures make them an attractive option for various environments. However, they come with challenges, including the potential for false alarms, regulatory compliance, and costs associated with installation and maintenance. Proper training and regular maintenance are essential to maximize their effectiveness. Balancing these pros and cons can help determine whether fog generators are a suitable security measure for specific needs and environments.

This article originally appeared in the聽听辞蹿听.聽Paul F Benne is the President of 杏吧原创 and has over 35 years in the protective service industry.

The post Clearing the Fog on Security Foggers appeared first on 杏吧原创.

A Security Operations Center (SOC) serves as the nerve center for monitoring, detecting, and responding to security incidents. Integrating Protective Intelligence within the SOC framework not only bolsters its efficacy, but it also empowers proactive measures against potential vulnerabilities.

Understanding Protective Intelligence

Protective Intelligence encompasses the proactive gathering, analysis, and dissemination of information to preempt and mitigate security threats. Unlike traditional reactive approaches, which respond after an incident occurs, Protective Intelligence focuses on identifying potential risks before they materialize. This proactive stance enables security teams to anticipate threats, assess vulnerabilities, and implement preemptive measures, thereby minimizing the effects of a potential event.

Fortifying the SOC with Protective Intelligence provides security teams with actionable information that was previously non-existent or difficult to come by. Today, robust platforms like samdesk (), Dataminr (), and LifeRaft (), are game-changers in empowering security teams with Protective Intelligence.

In an era defined by evolving cyber threats, geopolitical instability, and emerging risks, the role of Protective Intelligence in enhancing the performance of SOCs cannot be overstated. By adopting a proactive stance rooted in intelligence-driven decision-making, organizations can fortify their security program, mitigate risks, and safeguard their assets against potential threats. Here are some of the key features and benefits these platforms provide:

Early Threat Detection: One of the primary advantages of incorporating Protective Intelligence into SOC operations is the ability to detect threats at an early stage. By leveraging various sources 鈥� such as open-source intelligence, social media monitoring, and threat intelligence feeds 鈥� security analysts can identify indicators of potential threats before they escalate. This early detection enables swift intervention, preventing potential breaches or attacks.

By analyzing threat patterns and tactics, security teams can devise preemptive measures to deter potential adversaries.

Risk Assessment and Prioritization: Protective Intelligence provides valuable insights for risk assessment and prioritization within the SOC. By analyzing the credibility and severity of threats, security teams can allocate resources effectively, focusing on the most critical areas of concern. This targeted approach increases operational efficiency and ensures that the SOC remains vigilant against the most significant risks.

Enhanced Situational Awareness: Real-time intelligence feeds and threat analysis enhance the situational awareness of SOC operators. By continuously monitoring evolving threats and trends, security analysts gain a comprehensive understanding of the threat landscape. This heightened awareness enables proactive decision-making and rapid response to emerging security challenges, minimizing potential disruptions to business operations.

Threat Mitigation Strategies: Protective Intelligence enables the development of proactive threat mitigation strategies tailored to specific risks. By analyzing threat patterns and tactics, security teams can devise preemptive measures to deter potential adversaries. Whether through enhanced perimeter security, employee awareness training, or advanced threat-hunting techniques, Protective Intelligence empowers SOC operators to stay one step ahead of potential threats.

Intelligence-Led Investigations: Integrating Protective Intelligence into SOC operations facilitates intelligence-led investigations into security incidents. By correlating internal security data with external threat intelligence, analysts can uncover patterns, trends, and indicators of compromise more effectively. This intelligence-led approach streamlines incident response efforts, enabling faster containment and remediation of security breaches.

Proactive Threat Hunting: Protective Intelligence empowers SOC teams to engage in proactive threat-hunting activities. By leveraging advanced analytics and threat intelligence, analysts can proactively search for signs of malicious activity within the network. This proactive stance allows security teams to identify and neutralize threats before they cause significant harm, enhancing the efficacy of organizational defenses.

Collaborative Intelligence Sharing: Effective Protective Intelligence relies on collaboration and information sharing both within the organization and with external partners. By participating in threat intelligence sharing communities and industry forums, SOC teams can gain access to valuable insights and collective intelligence. This collaborative approach enhances the accuracy and timeliness of threat intelligence, strengthening the overall security posture of the organization.

Challenges to Avoid

While the benefits of Protective Intelligence are undeniable, implementing and managing an effective program within the SOC comes with its own set of challenges. The following considerations should be acknowledged and planned for when considering and deploying a Protective Intelligence program. This will minimize any negative or adverse effects of using this technology.

Data Overload: The sheer volume of data generated by various intelligence sources can overwhelm SOC analysts, making it challenging to separate qualified threats from noise. Narrowing the focus of the information these systems collect will help reduce the volume of inbound information that the SOC needs to review.

Resource Constraints: Building and maintaining a robust protective intelligence program requires dedicated resources, including skilled personnel, technology infrastructure, and ongoing training. To implement a Protective Intelligence program, there should be an analysis of whether current SOC staff are able to handle the additional tasks associated with accurately and efficiently curating the inbound intelligence.

Integration Complexity: Integrating disparate intelligence sources and tools into the SOC ecosystem can be complex, requiring seamless interoperability and data correlation capabilities. It is best to crawl before you run, keeping the program simple before creating multiple system dependencies.

Privacy and Compliance:聽Adhering to privacy regulations and compliance standards while collecting and analyzing intelligence data is critical to maintaining trust and legality. It is important to collaborate with your legal team when creating a Protective Intelligence program to play it safe.

This article originally appeared in the聽听辞蹿听. Paul F Benne is the President of 杏吧原创 and has over 35 years in the protective service industry.

The post Tech Trends: The Power of Protective Intelligence appeared first on 杏吧原创.

As it is within Law Enforcement, low morale is also prevalent in the security industry, particularly among contracted security officers. They rate their job satisfaction in the bottom 7% of careers.[1] The cause-and-effect relationship between low employee morale and an inferior customer experience is well documented. Therefore, part of my job as a security consultant is to help clients create a positive corporate culture. Yes 鈥� our primary business is creating safe and secure environments, but even the best security technologies and programs will fail if they are supported by a disgruntled workforce.

Gallup reports that teams with low morale experience 18 to 43% higher turnover. [2] Glassdoor reports a strong statistical link between customer satisfaction and the well-being of the employees delivering those services. Its study concludes that happy workers lead to happy customers.[3] Research by Eagle Hill Consulting found that 64% of U.S. workers say their employee experience impacts their ability to serve customers, with low-morale workers half as likely to deliver quality outcomes.[4]

Security services management may complain about their workers鈥� lackluster performance, calling in sick, no-shows, and high rates of turnover, but the root of their problem is often not the fault of the employees. It鈥檚 dysfunctional management and the environment they鈥檝e created that makes workers feel unappreciated, unempowered, and underpaid. The first two are things companies can easily fix. As for the third, employees are more than 10 times more likely to leave a job due to a toxic culture than salary.[5] If companies can make employees feel appreciated and empowered, they will save money by reducing workforce churn. This, in turn, could free up money to pay higher wages.

So, how do we fix low employee morale among security guards and others hourly workers in the security services sector? Here is a list of suggestions:

1. Train your supervisors on how to be effective leaders. The number one reason employees leave their jobs is because of their supervisor. The CEO of Gallup, Jim Clifton, says it best. 鈥淲hen you name the wrong person supervisor, nothing fixes that bad decision. Not compensation, not benefits 鈥� nothing.鈥�[6]

Promoting from within has a positive impact on workers because they see that there are opportunities for advancement, but those benefits only accrue if you provide associated management training. The skills that make a successful 鈥渨orker bee鈥� vastly differ from those needed to manage the hive. Yet 82% of people promoted to supervisory roles do not receive any formal training, according to a 2023 study by the Chartered Management Institute.[7]

• Solicit feedback from employees. Encourage them to offer solutions 鈥� not just identify problems. Simply being heard immediately makes them feel more valued 鈥� even if acting on their suggestions takes time.
  
  
• Make sure supervisors are clear about expectations and don鈥檛 criticize their underlings鈥� every move, especially if there are no written guidelines defining roles and responsibilities. If your organization lacks such guidelines, create them and put them in writing!  

Everyone on your team, from the top down, should make it a habit to offer praise and recognition for jobs well done. When employees know their efforts are appreciated, they are more likely to repeat them. Small gestures go far!

• Make security guards feel like they are part of a team. Keep them informed about news or changes happening at the corporate level.

Companies that contract guard services will find that those officers are more dedicated when they feel like they are part of the organization where they are assigned to work. They appreciate inclusion in workplace events and value privileges like access to the company gym and break room.

• Empower guards so that they can feel pride in their job. Patrolling a predictable route or sitting behind a desk with no power to do anything gets old fast. Provide guards with technology to maintain better situational awareness and tools that alert them to suspicious behavior. When security officers can be strategic and proactive about how they perform their duties, they鈥檒l find their jobs far more exciting and rewarding.

Many of these tactics can be employed by your in-house management team. Corporate culture doesn鈥檛 change overnight, but with dedicated efforts, progress will occur.

Hiring a consultant can be instrumental in moving the process along. An outsider鈥檚 perspective often pinpoints problems and strategizes solutions more objectively than managers who have skin in the game and egos that bruise. If that鈥檚 you, reach out. We may be security consultants, but solving morale issues is essential in running an effective security team. We鈥檙e here to help!

[1] .

[2]

[3]

[4]

[5]

[6]

[7]

The post Don鈥檛 Let Low Employee Morale Get You Down. Instead, Fix It! appeared first on 杏吧原创.

VIPs may be targets of stalkers, protesters, the paparazzi, and other bad actors seeking to do harm. Security teams need the tools to maintain situational awareness and facilitate command and control wherever heightened protection is called for. It鈥檚 a tall order.

Public events like parades, political rallies, sporting events, speeches, and performances, as well as private affairs, like the weddings and funerals of the rich and famous, occur in locations that are difficult to secure. Coverage must often span massive areas. Threats can come from any direction, including overhead and far beyond the event鈥檚 official perimeter.

Event security is focused on maintaining a secure environment for the public at large. Meanwhile, executive protection services must stand up separate command and controls dedicated to keeping their clients safe.

Deploying a dedicated command and control is expensive, as it must be equipped with much of the same technology as a permanent security operations center (SOC). Plus, it must provide reliable and redundant connectivity to all systems and devices utilized across the event site without the benefit of a permanent infrastructure.

Public sector dignitaries have protective details equipped to mount exhaustive security operations on their behalf. The U.S. Capitol Police, Secret Service, federal, and state agencies each have an abundance of resources, including a fleet of mobile command vehicles ready to deploy to protect dignitaries and politicians. The private sector does not. Unless such individuals face a specific threat against them, they typically must pay for their own security.

Fortunately, a new option has recently entered the security marketplace: mobile command as a service (MCaaS). Just as VIPs may invest in fractional jet ownership, MCaaS provides access to a fully equipped, state-of-the-art mobile command vehicle for a specified number of engagements per year.

When comparing services, here’s what stakeholders should consider.

What Technologies Are Included?
To approximate the command-and-control systems utilized by public sector dignitaries, an MCaaS solution should include an array of integrated security technologies from best-in-class manufacturers. Look for:

Video surveillance

Video analytics

Aerial drone surveillance

Drone detection

Gunfire detection

Perimeter protection

Real-time weather monitoring

Social media monitoring

Communication systems are equally important. A fully equipped mobile command should offer the following:

VoIP telephones

2-way radios

Cellular PTT radios

Satellite telephone, TV, and radio

Satellite and cellular data

Public address systems

The service should include the deployment of temporary cameras and other devices across the event site. Coverage should extend to broad perimeter monitoring, while placing an emphasis on areas where the client is most vulnerable, such as the green room, stage, and any walkways the client may traverse.

Live monitoring of social media is critical, as it may provide advance warning of potential threats. There should also be communication channels between event security and private security teams. If event security must contend with danger anywhere onsite, private security must have sufficient knowledge to evacuate its charge via the safest route possible

How Is It Deployed?
The 鈥淪鈥� in mobile command as a service differentiates today’s new offerings from more traditional rental models. A quick Web search of mobile command rentals will result in rental trailers equipped with communication systems and a workstation for video surveillance monitoring.

MCaaS represents a much broader suite of technologies, plus it includes the expertise of security professionals to assist private details with systems engineering, training, and onsite deployment. They can also attend events, working side-by-side with members of the executive protection service. MCaaS provides high-profile executives, high-net-worth individuals, and celebrities with the same tools and technologies used to protect top-level public sector VIPs.

To ensure the availability of vehicles, MCaaS providers may cap the number of clients they enroll to maintain a suitable client/vehicle ratio. They may also offer services to a limited geographic area, minimizing travel time before an event. An overextended MCaaS provider may not be able to deliver services when needed, negating the value of the investment.

A Paradigm Shift
The security industry’s digital transformation has brought countless new technologies to the market. Unfortunately, they only help the customers that can afford them. Many technology manufacturers have migrated to a recurring revenue model to reduce upfront hardware costs, thus making their cutting-edge solutions accessible to a broader base. Customers benefit from always-current systems that require less maintenance, include free updates, and offer operational expenditure tax advantages.

MCaaS offers similar value propositions, albeit on a grander scale. VIPs, or the executive protection services that protect them, may have previously deemed a fully-equipped mobile command as beyond budget. MCaaS will level the playing field, bringing grade-A resources to the private sector. It’s a paradigm shift whose time has come.

Article Link –

Paul F Benne is the President of 杏吧原创 and has over 35 years in the protective service industry.

The post Elevating Executive Security with Mobile Command as a Service appeared first on 杏吧原创.

DIY security technology is being marketed everywhere 鈥� TV commercials, online advertisements, big box stores, home improvement stores, etc., and just about every big name (Amazon with Blink, Ring and Alexa Guard Plus, Google with Nest, Blackstone with Vivint, Netgear with Arlo, ADT with Blue, and independents like SimpliSafe, Cove and many others) have positioned themselves in the DIY security game.

You can find alarm systems, various detectors, cameras, smart locks, just about every traditional security endpoint now comes as a IoT device that can easily be added to a home network or installed and configured with a smartphone.

The DIY market has a lot going for it, providing some significant advantages over its more traditional security technology predecessors. Here are five:

1. Easy to install and configure: In many cases, device enrollment is as easy as downloading an app and scanning a QR code, and the user is operational. Let鈥檚 face it, this is not the case in the commercial world, where knowledge of the device, the platform its operating on, and the networking system that connects the edge devices are all a part of the configuration process.

2. Quality and reliability: The output quality is comparable to commercial grade (noting some significant drawbacks with the DIY systems) and the reliability 鈥� while not to the level of its commercial grade comparable devices 鈥� is good enough for most consumers.

3. Low cost and barrier to entry: From cameras under $25 to smart locks hovering around $250, costs for this technology comparative to the commercial market are significantly lower. Many systems offer a trial or feature limited version of service that make the barrier to entry also very low 鈥� enabling consumers to try it out without making a big commitment. This is also very cleverly designed to draw them into a service plan.

4. Built-in RMR: The holy grail of the residential security market, these products have significant Recurring Monthly Revenue (RMR), making this a gold rush to grab market share.

5. Public safety impact: Many service providers have programs to support local law enforcement efforts with camera feeds. While this is a great tool for crime fighting, it is also a concern for privacy advocates in the over use of private-sector security technology for public sector use, and in the mass collection of data on the populous by big tech.

How Integrators Can Take Advantage

The pace has been set, the DIY installation of IoT security edge devices is here to stay. With its rapid growth and benefits that clearly make this an advantageous business venture for manufacturers, is the commercial market in danger of losing market share to innovations in DIY applications?

I believe the answer is yes, as least for small to mid-sized applications. The truth is that VSaaS and ACaaS companies are moving in this direction already, making the installation of security edge devices like cameras, sensors, and access points easier than ever to install and configure.

That said, I see some significant gaps that DIY manufacturers are not in a position to address, and it is where these gaps exist that commercial security integrators can provide a value-add to the emerging residential and commercial DIY market.

While DIY manufacturers are banking on the DIYer, the integration industry should be looking at the obvious holes it creates in both the residential and commercial marketplace. For us as an industry to adapt and embrace advances in technology, we need to find the areas where we can bring value to the user in the process of planning, designing, deploying, and managing this technology. Here are three key areas:

Advanced applications 鈥� These aaS and DIY systems are limited in their enterprise-level applications 鈥� especially when a customer needs high availability in critical facilities and applications, advanced configurations, integrations, and features from third-party manufacturers. Integrators and consultants need to know how to properly advise clients when they are considering what appears to be an easier solution. What are they losing with the 鈥渆asier鈥� solution? What are the holes of the 鈥渆asy鈥� solution?

Design and installation 鈥� Sure, any novice can put a camera up to watch the door, but what about resolution, pixels on target, frame rate, back light considerations, retention periods, etc., for video surveillance applications? Consider door hardware, egress requirements, credentialing technologies, etc., for access control. What about appropriate sensor selection and use, local code compliance, communications redundancy, etc., with alarm systems? These are all areas where the security professional is able to surpass a novice in designing and deploying a commercial or enterprise class system.

Specialized expertise 鈥� At the end of the day, even the most crafty DIYers have other responsibilities. Taking the time to review, select, purchase, install, and configure DIY systems is still extra work. Integrators have an opportunity to pick up this void in the market by offering residential and small business packages that are turnkey and also provide RMR.

Security technology professionals need to be ready to identify and respond to the changes in the market with viable solutions. By studying this and other market trends, you can see where the emerging technology is going and where it will influence the rest of the industry.

Article Link –

This article originally appeared in the聽听辞蹿听. Paul F Benne is the President of 杏吧原创 and has over 35 years in the protective service industry.

The post Tech Trends: Is Commercial Sector DIY a Threat? appeared first on 杏吧原创.

Why is the security industry so fearful of intrepidly moving forward and embracing these new technologies to enhance the overall effectiveness of their 鈥� or their customers鈥� 鈥� protection programs?

Common Barriers to Entry

In working with many end-users over the years, I have seen numerous, consistent, and repeating barriers to entry in adopting and embracing emerging technology. Often these barriers to entry are largely centered on leaving a comfort zone of the known for the unknown.

Let鈥檚 explore four of the key barriers to entry for end-users considering new and emerging technology:

Cutting edge vs. bleeding edge: Being an early adopter can be appealing 鈥� you are first in line to grab up the latest technology. Unfortunately, many times as new technology is first rolled out, it comes with a host of complexities in getting it to operate as intended. This is where the cutting edge turns into the bleeding edge 鈥� when the new technology causes the user, integrator and everyone involved in the rollout of the technology a painful go at getting it right.

In the meantime, someone needs to answer to the person in the organization who is paying the bills as to why this technology is not performing as expected 鈥� making the venture of becoming an early adopter painful, expensive, and potentially embarrassing.

How do you avoid this type of blunder in being an early adopter? You could, of course, wait until the manufacturer of the technology has taken their lumps from other early adopters. A better practice would be to think ahead of the curve using a lab environment to bench test any new technology before it gets introduced to you or your customer鈥檚 systems in an active capacity.

Have a rollback strategy vetted to ensure you have a path to return to a previous system configuration should your technology rollout go wrong. These best practices are valid for both emerging technology or simply adding new technology to your organization.

Leadership buy-in: Often, if leadership cannot see the direct correlation to saving time or money, it is a harder sell to get new and emerging technology embraced and funded. Sometimes the reverse is true, where leadership is introduced to a shiny new thing, and they want it 鈥� now!

Because of the urgency, it is everyone else鈥檚 task to make it happen.

How do you make the business case for a new technology? It is all in the numbers. In evaluating technology, most all technology is designed to do something better, faster, smarter, etc., and that gets expressed by two key factors: time and money. When making the case for new technology, detailing the short- and long-term savings in capital and operational expenses, as well as the human capital savings for adding technology, should enable end-users to express the return on investment. This is the key selling factor to obtaining leadership buy-in, and it is something integrators should be helping their clients to achieve.

Regulatory factors: Having new technology that can solve a problem for a regulated industry may have the customers lined up at an integrator鈥檚 door with interest, but they may be hesitant to make the purchase until the 鈥減owers that be鈥� chime in with direction or approval.

For example, in the airport vertical, many new technologies that can work well in the airport environment take considerable time for the solution to be evaluated by the FAA and the National Safe Skies Alliance. Most airports will wait for this evaluation before it is is willing to dedicate the funding required to implement the solution.

In the regulated environment, there is not much workaround to this process; thus, it is best to set new and emerging technology up for early review. In some cases, the customer can serve as a test bed if they are willing.

Skepticism: The product always looks good on the trade show floor, but will it perform in the real world? Salespeople are great at pitching the promise, but battle-hardened security professionals know that big promises can come with big disappointments.

Unfortunately, those disappointments can tarnish good reputations. For that reason, seasoned security professionals are far more likely to shy away from technology that has not been vetted by peers and endorsed by other reputable firms and manufacturers.

To avoid the 鈥渃old shoulder鈥� when introducing new and emerging technology to customers, it is best to know your facts about the product. Explain how it has been proven in the marketplace and what guarantees the manufacturer and supplier are willing to make behind its successful deployment. If you are truly confident in how the technology will perform, base your payment structure on the technology鈥檚 successful deployment and performance.

Take the risk off the customer. If the technology does not perform, remove it at no cost. If it works successfully, the customer pays a 10% premium 鈥� a win/win.

Keep Pedaling

Overall, removing the barriers to entry on new and emerging technology falls on the manufacturer. The end-user wants to know they will not end up spending money on something that does not perform, has a costly and frustrating implementation, and creates a generally embarrassing situation professionally that needs to be explained to leadership.

In the meantime, manufacturers should keep bringing those solutions to market and integrators and consultants should be making the case for their successful implementation.

Article Link –

This article originally appeared in the聽听辞蹿听.听Paul F Benne is the President of 杏吧原创 and has over 35 years in the protective service industry.

The post Tech Trends: Overcoming Barriers to Entry appeared first on 杏吧原创.

For years, AX 鈥� formally known as Anime Con 鈥� earned the unfortunate nickname of 鈥渓ine-con鈥� due to massive crowds that formed just to gain entrance, which meant headaches for security and operations staff.

Thanks to a unique combination of weapons screening technology, guard and canine services, and temporary security technology 鈥� all coordinated by security firm 杏吧原创 鈥� AX 2022 was a rousing success. The project has been named has been named as an honorable mention in the 2022 Security Vanguard Awards from SecurityInfoWatch, Security Business magazine and Security Technology Executive (STE) magazine.

The Crowd Control Challenge
Based on turnstiles at the entrances, more than 110,000 people attended the Anime Expo over the three days at multiple venues, including the Los Angeles Convention Center, Novo (an indoor club), and the Microsoft Theater.

Efficient screening was the first challenge for Michael Grossman, a senior advisor at New York City-based 杏吧原创
Photo: Anime Expo
A carefully crafted screening strategy helped was part of a successful crowd control effort at the 2022 Anime Expo in Los Angeles.
A carefully crafted screening strategy helped was part of a successful crowd control effort at the 2022 Anime Expo in Los Angeles.
Consulting, who was responsible for all security planning and operations, including the preparation of a comprehensive operations plan and the management of the overall on- site security operations.

A massive crowd is one thing, but the vast majority of these attendees came to the AX venues in full costumes 鈥� many including imitation weapons. The Society for the Promotion of Japanese Animation (SPJA), the event organizer, also required COVID-19 checkpoints.

鈥淲e were getting people into the buildings, but the crowding on the outside [creates] a soft target,鈥� explains Matthew Thomas, SPJA鈥檚 senior director of operations.

Thankfully, Grossman and the 杏吧原创 team came up with a multi-faceted solution, combining high-throughput weapons screening technology with good, old-fashioned security officers 鈥� provided by Ayvar Security, JRM Security and Executive Event Services 鈥� and canine teams from MSA Security Services, a division of Allied Universal. Additionally, RFID badging implemented at the show helped with counting attendees and protected against people getting in without the proper credentials.

鈥淚t is not all high-tech, but when you use all those things to your advantage and integrate their use, that makes a system more efficient and there are a lot fewer problems,鈥� Grossman says.

As for the technology aspect of the crowd control technology, Thomas and Grossman zeroed in on the Evolv Express, a high-throughput walk-through weapons screening system that uses digital sensors and artificial intelligence to spot concealed weapons and other threats.

The company claims a unit can screen 4,000 people per hour, and that the technology has been successfully used at stadiums, theme parks, hospitals, schools and other busy venues. Ideally, the technology is accurate enough that people are not required to stop, empty their pockets or remove bags as they are screened.

2022 was the first year that AX used the screening technology, and Thomas 鈥� who held previous security operations roles at Universal Studios and Westfield malls 鈥� says it enhanced the throughput of patrons from 55 people per hour to 300 people per hour at each entry point.

鈥淗onestly, I think it was a little too quick, and we slowed that down on site just to be very thorough,鈥� Thomas admits. 鈥淭hat was due to my thinking that it is impossible. I am used to the metal detector going off on every belt buckle.鈥�

Achieving Situational Awareness
Grossman 鈥� who retired from the Los Angeles County Sheriff鈥檚 Department in 2013 as chief of the Homeland Security Division and later served as SVP of U.S. National Security for Westfield Corp., where he oversaw security operations for 32 malls across the nation 鈥� assembled a security command center at AX that coordinated the activities of all security and life safety agencies, including convention center security and private contractors, Los Angeles Police Department, and many others.

Through the assistance of Las Vegas-based Unified Command, a temporary surveillance system was also deployed, with cameras placed at strategic locations to maintain situational awareness at key points throughout the venue. The temporary system focused on areas outside the venues, since the buildings had their own cameras.

鈥淲e were working with the existing Convention Center security with their technology and adding on our technology to compliment,鈥� Thomas says. 鈥淭hat really helps us get good angles to manage crowds and respond to certain things from the [security monitoring] perspective.鈥�

Those working in the Unified Command post could monitor cameras, zoom in on nearly any area or focus on certain cameras. 鈥淭hey know exactly the things that need to be seen and where to put cameras,鈥� Grossman says, adding that the command post at AX was similar to one that he might set up for a large wildfire or other major event.

鈥淵ou have representatives from all the agencies that do security or emergency response in the same room and monitor for 24 hours a day through the entire event,鈥� he explains. 鈥淚f you don’t have adequate planning, and documented planning, a clear organizational chart, clear lines of communication, and contingency plans, [if] something comes up, it is pretty tough to manage,鈥� Grossman says.

In reviewing the successful AX 2022 security operations, Thomas says 鈥渢he secret sauce is there right now鈥� to maintain an effective security program for AX in the future. As for similar events, he implores event security managers to take advantage of all the technology and tools available, even if the cost is hard to swallow.

鈥淎ll it could take is one situation, and you no longer have an event anymore,鈥� Thomas says. 鈥淚 like spending a bunch of money on security鈥ecause [it means] we’ve done the most that we can to protect everybody.鈥�

John Dobberstein is managing editor of SecurityInfoWatch.com.

Project Overview: Anime Expo

Project submitted by: 杏吧原创

Weapons Screening: Evolv Technology

Temporary Surveillance System: Unified Command

Video Management System: Milestone

Guard Services: Ayvar Security, JRM Security and Executive Event Services

Canine Services: MSA Security Services

This article is part of the annual Security Vanguard Awards, presented by SecurityInfoWatch.com, Security Business magazine and Security Technology Executive (STE) magazine. Learn more about the Vanguard and its many winners over the years at www.securityinfowatch.com/vanguard.

Article Link – https://www.securityinfowatch.com/security-executives/article/21284746/keeping-350k-anime-expo-attendees-safe

The post Keeping 350K Anime Expo Attendees Safe appeared first on 杏吧原创.

If you are considering this as a provider or an end-user, you will need to look beyond the sales pitch to see the true value 鈥� and the drawbacks 鈥� of this technology trend.

At first pass, the 鈥渁aS鈥� model can be very annoying to me as a consumer. I used to go into a store or browse online at the software available and buy it outright. If I elected to upgrade to a newer version in the future I could, but my hand was seldom forced, and the power was all mine.

Now, you are hard-pressed to find a software platform that is not offered in some type of subscription or SaaS model, and this trend is moving from the software world to hardware, systems and services. It is like you cannot 鈥渂uy鈥� anymore, only rent, but is this all bad?

The Pros and Cons
Understanding some of the pros and cons of this trend can help you understand its value, both to yourself individually and to an overall organization. While there are many aspects of the 鈥渁aS鈥� sales model, here are five considerations you should evaluate prior to making the commitment 鈥� keeping in mind that one person鈥檚 pro may be another person鈥檚 con. Thus, consider these points under your own application and circumstances.

1. Limits expensive server hardware: When using platforms like Ava Security, Brivo, OpenEye, IronYun, etc. certain configurations of these services can be cloud-based. This can reduce or eliminate the need for on-premises servers, which are costly and have a limited lifespan.

If your customer is considering a traditional deployment of security technology, they need to consider that the servers installed on premises will come at a high cost and will need to be replaced in 5-8 years. They will also need to consider that they will likely need a Software Service Agreement (SSA) and a preventive maintenance contract to keep the system updated with patches, fixes and version releases. With an 鈥渁aS鈥� model, all of this is included.

2. CapEx vs OpEx: While evaluating 鈥渁aS鈥� options, take into consideration how the customer will buy the technology. Many construction projects have deeper CapEx budgets to allow for the initial procurement and installation of expensive security technology; however, buying 鈥渁aS鈥� typically gets expensed through OpEx budgets and is a recurring monthly or annual expense 鈥� which can be more highly scrutinized. Having a thorough understanding of how 鈥渁aS鈥� is funded and working out the details with the end-user鈥檚 finance department is critical to resolving push-back regardless of what solution is up for consideration.
3. Critical facilities, SOCs and uptime requirements: For facilities that operate in a critical capacity and have an on-site SOC, GSOC, or other real-time point of aggregating security information, close attention to 鈥渁aS鈥� features are mandatory. Most 鈥渁aS鈥� offerings have some or all features that are entirely dependent on outbound network connectivity; therefore, if the network fails, the security operation loses the ability to access and use the 鈥渁aS鈥� product.

When evaluating 鈥渁aS,鈥� ask your customer very pointed and hard questions about what services operate and if there are critical services that will not work in the event that outbound network connectivity is severed.

4. Bandwidth and network: The 鈥渁aS鈥� sales pitch is typically a good one when it is well-perfected and delivered, but there are some downsides to consider, and integrators will need the end-user鈥檚 IT department or a non-biased third party like a consultant to help navigate the sales pitch and dig into the tech requirements of the network.

Having 10, 50, 100, or 1000 cameras at a facility that are going to a cloud-based 鈥渁aS鈥� will have big implications on network architecture and bandwidth. Be sure this is fully understood before making a commitment to the 鈥渁aS鈥� technology.

5. Proprietary equipment: Some 鈥渁aS鈥� platforms openly accept cameras and edge technology from multiple manufacturers; others have cameras that can be used on other systems should you elect to stop using those systems in the future. That said, be warned that this is not the case for all 鈥渁aS鈥� providers; in fact, some providers鈥� cameras are as good as a brick should your customer stop using the 鈥渁aS鈥� platform. This could be a costly and embarrassing mistake.

Best Practices
Here are key takeaways for considering any type of 鈥渁aS鈥� model for software, systems, or services:

Thoroughly understand what your customer鈥檚 needs are before calling 鈥渁aS鈥� companies in to do a sales pitch. Not having this will distract you with sales presentation sparkles, bells, and whistles that may be great features, but can deviate from the core performance objectives required to serve the business.

Understand the points of failure in 鈥渁aS鈥� models and be willing to accept the risks they present. Knowing exactly where the points of failure are enables the integrator and end-user to build operational processes to stopgap the vulnerability should a failure occur.

Know the total cost of ownership (TCO) of both the 鈥渁aS鈥� and traditional deployment of the software, systems, and services you are evaluating.

Don鈥檛 go it alone. Bring in IT, Finance, and other key stakeholders of the business to help evaluate the solution from their areas of expertise.

Paul F. Benne is a 35-year veteran in the protective services industry. He is President of 杏吧原创 LLC, a security consulting and design firm in based in New York City. Connect with him at www.linkedin.com/in/paulbenne or visit www.sentinelconsulting.us.

Article Link 鈥� https://www.securityinfowatch.com/integrators/article/21278024/tech-trends-security-tech-for-nonsecurity-stakeholders

This article originally appeared in the November 2022 issue of Security Business magazine. Paul F Benne is the President of 杏吧原创 and has over 35 years in the protective service industry.

The post Tech Trends: Everything as a Service appeared first on 杏吧原创.