Seven Deadly Sins of Building Security
- 09 September, 2009 07:10
- Comments
You've got a few security guards and your CCTV system is up to snuff. You've got your building security covered, right? Think again. While many organizations are taking the steps to ensure their building is secure, many are ignoring basic pieces of the puzzle that is physical security in and around a facility.
Tim Giles, a security consultant and author of 'How to Develop and Implement a Security Master Plan,' was once in charge of all IBM Security operations for the US and Canada and today advises clients about how to design a security plan that fits the risk-level and needs of their building. He provides a rundown of some common missteps organizations make when devising a plan to secure their facilities.
1. Creating post orders without advanced analysis
"Most companies don't have an inside person with facilities security expertise," said Giles. "Often the facilities manager will put together a guard services contract and contract services with a company and they really have very limited ideas about how to manage it."
Giles thinks the problem is that an outside contract company will often come into the assignment with their own post orders and place security personnel without first conducting a real analysis of the security needs of the building. And because there isn't an experienced person within the company that understands security, there is no system of checks to ensure the contract security personnel are doing what they should be doing, said Giles. (Read a first-hand account of how easy it is for criminals to get in the door of a secure building in Anatomy of a Hack) Before any contract security services firm creates post orders for a building, they should first conduct a thorough assessment of the unique needs for security in the facility.
"Buildings differ primarily because of who the tenants are," said Giles. "Security needs to evaluate who is in there and what kind of risks they bring with them. Some have a high-traffic volume of visitors. They could be controversial; some might face the possibility of problems with former or disgruntled employees. All of those things dictate what security should be doing at their posts." (See Giles's sample employee termination checklist in CSOonline's Security Tools and Templates section)
2. Placing aesthetics over security
Giles said this mistake can be made as early as when the building is designed by an architect. While ground-level lighting and hidden cameras may be more pleasing to the eye, neither are good for security. Giles said he once worked in a building where the architect had designed all the cameras to be out of sight.
"But someone seeing the camera is 50 percent of the value because it's a deterrent," noted Giles. "When people know they are on camera, they are much less likely to do something wrong."
Another common design Giles sees that makes him cringe is shrubbery that runs along walkways and sidewalks.
"Suddenly someone who wants to rob someone has a nice hiding place," he said.
- Bookmark this page
- Share this article
- Got more on this story? Email Computerworld
- Follow Computerworld on twitter
- Security Guard Contracts: Finding Your Inner Lawyer - CSO Online - Security and Risk
- Social Engineering: Anatomy of a Hack - CSO Online - Security and Risk
- Sample Termination Checklist - CSO Online - Security and Risk
- Security Tools, Templates, Policies - CSO Online - Security and Risk
- Security Awareness Programs: Now Hear This! - CSO Online - Security and Risk
- VMS: How to Manage Surveillance Video - CSO Online - Security and Risk
- 19 Ways to Build Physical Security into a Data Center - CSO Online - Security and Risk
- Excerpt: What Should Your Security Strategies Be? - CSO Online - Security and Risk
- Amazon.com: How to Develop and Implement a Security Master Plan (9781420086256): Timothy Giles: Books
- Is your data center ready for virtualisation? Important power considerations for virtualised IT environments
- Customer Case Study: Yarra Valley Water Turns to Enterprise Software to Improve Information Flow
- Improving the Management and Sharing of Massive Data Volumes
- Why Encrypt? Securing Email without compromising communications.
- CommVault Extends its Data Protection and Information Management Strategy with Simpana 9
- iPhone 5 rumour rollup for the week ending February 10
- 3D mapping revives underwater city
- Academic challenges Turnbull over NBN satellite criticism
- What are you saying: Telstra’s customer service slowly improving, SA minister urging Facebook to overturn its photo ban
- In pictures: Capgemini opens new Canberra office
-
Windows Event Viewer phishing scam remains active
-
NeuroSky MindWave: Fun with Brainwaves
-
20 popular Ubuntu Linux apps you may want to try
-
Nokia N9: Why you shouldn't buy this device
-
Microsoft at a loss over Event Viewer scam
-
Windows 7 for Dummies® Dvd+book Bundle
-
Teach Yourself Visually Windows 7
-
Windows 7 for Dummies®
-
Computers for Seniors for Dummies, 2nd Edition
-
Excel 2007 All-In-One Desk Reference for Dummies
-
Windows 7 for Seniors for Dummies®
-
Microsoft Office
-
Office 2007 for Dummies
-
Office 2007 All-In-One Desk Reference for Dummies












Comments
Post new comment