asis oct12 000 asis riskuk oct12 · 2019-02-11 · autumn 2012 3 2012/2013 diary diary of events...

16
INTERNATIONAL TM Newsletter AUTUMN 2012 UNITED KINGDOM CHAPTER 208 CPP Passes CONGRATULATIONS Congratulations to: Eric Tettey, Isaac Ennin, Mike Thompson, Ben Murrell,Marius, Georgescu, Bhawesh Pandy, Kevin Brownel and Teeman Chilume all of who sat and passed their CPP exam in the UK in the last few weeks. Their successes, combined with those of their class- mates yesterday, mean that all delegates attending the recent ARC Training Intensive Study Course for CPP passed the examination on first attempt. Home countries of the delegates include Ghana, Botswana, Pakistan, Romania and the UK/Nigeria. A record over 50 security professionals have under- taken CPP certification preparation courses with ARC Training during 2012, and 20% of the UK member- ship of ASIS are now certified to this ultimate world- class credential in security management compe- tence. The 2013 preparation programmes begin in January. Please visit www.arc-tc.com for more information. 20th Anniversary ASIS has been present in the UK for many years and was originally part of Chapter 44, which incorporated a wider area with Europe. As a result of increasing membership numbers and activity on January 13th 1993 Chapter 208 was given it’s charter. This means that we are coming up to our 20th Anniversary. Despite the economic climate, Membership has been remarkable stable over the last few years and has grown over the last two years. At the start or our 21st year in January, numbers will be around 750. This figure includes over 100 UK Chapter 208 members who are currently working overseas., which shows not only the international nature of ASIS, but also of the UK Chapter. We are starting to make plans to celebrate this milestone It was announced in the last edition that Allison Wylde was awarded the Association of Security Consultants Imbert Prize for her work on the ASIS Physical Security Standard. She was unable to attend the Awards Lunch but was presented with the award by former ASIS Chapter Chairman and Chapter Life Vice President Derek Webster at the Autumn Seminar in September.

Upload: others

Post on 15-Mar-2020

4 views

Category:

Documents


0 download

TRANSCRIPT

Page 1: ASIS oct12 000 ASIS RiskUK oct12 · 2019-02-11 · AUTUMN 2012 3 2012/2013 DIARY Diary of Events 2012/2013 INSIDE THIS ISSUE: Committee members 2 Diary 3 Events 4 Ex Police in Commerce

INTERNATIONALTMNewsletter

AUTUMN 2012UNITED KINGDOM CHAPTER 208

CPP Passes – CONGRATULATIONSCongratulations to:

Eric Tettey, Isaac Ennin, Mike Thompson, Ben Murrell,Marius, Georgescu, Bhawesh Pandy, Kevin Brownel and Teeman Chilume

all of who sat and passed their CPP exam in the UKin the last few weeks.

Their successes, combined with those of their class-mates yesterday, mean that all delegates attendingthe recent ARC Training Intensive Study Course for

CPP passed the examination on first attempt. Homecountries of the delegates include Ghana, Botswana,Pakistan, Romania and the UK/Nigeria.

A record over 50 security professionals have under-taken CPP certification preparation courses with ARCTraining during 2012, and 20% of the UK member-ship of ASIS are now certified to this ultimate world-class credential in security management compe-tence. The 2013 preparation programmes begin inJanuary.

Please visit www.arc-tc.com for more information.

20th AnniversaryASIS has been present in the UK for many years andwas originally part of Chapter 44, which incorporateda wider area with Europe.

As a result of increasing membership numbers andactivity on January 13th 1993 Chapter 208 was givenit’s charter.

This means that we are coming up to our 20thAnniversary.

Despite the economic climate, Membership has beenremarkable stable over the last few years and hasgrown over the last two years. At the start or our 21styear in January, numbers will be around 750.

This figure includes over 100 UK Chapter 208members who are currently working overseas., whichshows not only the international nature of ASIS, butalso of the UK Chapter.

We are starting to make plans to celebrate thismilestone

It was announced in the last edition that Allison Wylde was awarded the Association of Security

Consultants Imbert Prize for her work on the ASIS Physical Security Standard.

She was unable to attend the Awards Lunch but waspresented with the award by former ASIS ChapterChairman and Chapter Life Vice President DerekWebster at the Autumn Seminar in September.

Page 2: ASIS oct12 000 ASIS RiskUK oct12 · 2019-02-11 · AUTUMN 2012 3 2012/2013 DIARY Diary of Events 2012/2013 INSIDE THIS ISSUE: Committee members 2 Diary 3 Events 4 Ex Police in Commerce

www.asis.org.ukAUTUMN 20122

CHAIRMAN’S NOTES | EDITORIAL TEAM

Your Chapter is forever developing new ideas and partnershipsto improve the Chapter’s status as a leading professionalorganisation recognised here in the UK and overseas. My twovery busy vice chairman; Graham and Mike H, continuouslyendeavour to reach out to other organisations and demonstratewe are not a threat to them and are always delighted to work withthem to improve the standing of the security industry which hasrecently suffered a body blow from the bad press over thesecurity resource failure associated with protecting the Olympics.

The excellent work undertaken by the Worshipful Company andthe Security Institute in achieving and rolling out Charter statushas gone a long way to getting the security industry recognised asa professional career alongside Architects and Engineers etc.Combined with our own goal of achieving a greater level ofacademic achievement amongst our members through CPP, PSPnow closely linked to degrees and Masters, we could see thestatus of all those working in the security industry beingrecognised as true professionals. All this has received a knockback but we as an industry need to brush aside this set back andget out there sell security to all those willing to listen and thosethat are not; as a worth while career and we welcome andencourage youngsters to give serious consideration to enter thesecurity arena.

Going onto other initiatives, I amdelighted Woman in Security (WIS) isattracting a great deal of interest andAlexandra Whyte and her immediatecommittee are to be congratulated intaking this new initiative forward.

There have been two major moves intotwo arenas we have been attempting topenetrate for some time and could resultin our membership increasing. Graham LeFevre has made in-roads into the armedforces resettlement organisation and Richard Stones has equallymanaged to do the same with Police resettlement. With theoutcome of well published reduction in both the police and armedforces there will be thousands of potential new recruits enteringthe various security industries at all levels and we as a chaptercan reach out and help these people settle into their new career.

Finally can I request you support your Chapter and attend theChapter meetings especially the AGM in December where I willbe asking you for your approval to stand as your Chairman for afinal year.

As it too early to mention Christmas, I wish you and yourfamilies the very best and good health for the future.

Mike AlexanderChairman ASIS International UK Chapter

Helene Carlsson – Assistant EditorHelene has been working in thesecurity industry over 25 years, bothas a corporate security manager andas a consultant.She has worked with many differentclients specialising in non-IT security,Business Continuity and CrisisManagement.Helene has been a member of ASISsince 1989 and on the ASIS 208committee for over 15 years. She hasbeen actively involved on the Mediasub-committee for the same amount oftime and is a strong supporter of thechapter and the international edge theASIS membership provides.Helene is working on the group writingthe standard for Asset Protection byPhysical Security Measures

Mike Hurst – EditorMike entered the security industry in1998 and initially worked in Sales andGeneral Management roles.In 1992 he joined HJA Fire andSecurity, Recruitment Consultantswhere he is a Director. He recruits at alllevels across a range of securitydisciplines.He is a Fellow of the Institute ofRecruitment Professionals (FRIP) and aDirector of The Security Institute. He isa regular contributor to numerous securitypublications. Mike is Editor of theNewsletter, Webmaster and set up andadministers the ASIS208 Blog.Mike is Chapter 208 Vice Chairman -Strategy.

Helene

[email protected] [email protected] [email protected]

Mike

Graham

Graham Bassett – Advertising andSeminar ExhibitorsGraham has worked in the securityrecruitment profession for 20 yearsand is the founding director of GBRUKa London based recruitment firm.He was the founder Chairman of theBSIA Code of Ethics and was also onthe Executive Committee for the RECAssociation of Executive Recruiters,responsible for standards, member‘sbenefits and marketing.Like Mike he is a Fellow of the Instituteof Recruitment Professionals (FRIP)and a Member of the Security Institute(MSyI).Graham is an avid supporter of takingASIS forward within the securityprofession and welcomes yourcommercial support of the Chapter.Graham is Chapter 208 Vice Chairman– Operations, responsible forSeminars, Advertising, Exhibitors andSponsorship.

Editorial Team

Chairman’s notes

Mike Alexander

Page 3: ASIS oct12 000 ASIS RiskUK oct12 · 2019-02-11 · AUTUMN 2012 3 2012/2013 DIARY Diary of Events 2012/2013 INSIDE THIS ISSUE: Committee members 2 Diary 3 Events 4 Ex Police in Commerce

www.asis.org.uk AUTUMN 2012 3

2012/2013 DIARY

Diary of Events 2012/2013 INSIDE THIS ISSUE:Committee members 2Diary 3Events 4Ex Police in Commerce 5Facewatch 6Spring Dance 7Cyber 8Twitter 10ASIS Collaboration 11European Conference 12Project Management 13Legal Update 14ASIS International 15

ESSENTIALINFORMATIONJOINT EDITOR – Helene Carlsson (07802 864485)[email protected]

JOINT EDITOR – Mike Hurst(0845 644 6893)[email protected]

ADVERTISING – Graham Bassett (07961 123763);[email protected]

Chapter Executive Officer – Jude Awdry,ASIS UK Chapter 208, PO Box 208,Princes Risborough, HP27 0YR.Tel: 01494 488599; Fax: 01494 488590;[email protected].

MEMBERSHIP ENQUIRIES – Nigel Flower, CPP (01276 684709 - [email protected])

PUBLISHERS – The 208 Newsletter ispublished by Chapter 208 of ASISInternational.

FREQUENCY – The 208 Newsletter ispublished four times per year, Spring,Summer, Autumn & Winter – pleasecontact the editorial team for deadlines.

IN GENERAL – The 208 Newsletterwelcomes articles & photographs, but whileevery care is taken, cannot be heldresponsible for any loss or damage incurredwhile in transit or in our possession. Pleasesend all material to the editors. TheNewsletter may publish articles in which theviews expressed by the author(s) are notnecessarily those of ASIS.

ISSN N0 – 1350-4045

October9th TINY London Conference10th - 11th Global Security Summit10th BRC Retail Crime & Loss Prevention

Conference 2012 www.retailcrimeconference.com

14th - 15th Transport Security Expo18th Security Institute Masterclass November14th - 15th Transport Security Expo and Conference14th ASIS Heroes's Tribute EveningDecember3rd - 5th 6th ASIS Asia-Pacific Security Forum and

Exhibition, Hong Kong6th ASIS UK Winter Chapter Meeting and AGM

State Street Bank, Canary Wharf London13th Security Institute Curry Night, Victory

Services ClubFebruary17th - 19th 4th ASIS Middle East Security Conference

and Exhibition, Dubai March13th ASIS UK Spring Meeting (provisional) April14th - 16th 12th ASIS European Security Conference

and Exhibition, Gothenburg 24th - 25th Counter Terror ExpoMay13th - 16th IFSEC, Birmingham June12th ASIS UK Summer Meeting (provisional) September11th ASIS UK Autumn Meeting (provisional)24th - 27th 59th ASIS International Seminar and

Exhibits, ChigaoDecember11th ASIS UK Winter Meeting and AGM

(provisional)

If you know of an event that you feel should feature in our calendar, please contact the editor, Mike Hurst. [email protected]

Page 4: ASIS oct12 000 ASIS RiskUK oct12 · 2019-02-11 · AUTUMN 2012 3 2012/2013 DIARY Diary of Events 2012/2013 INSIDE THIS ISSUE: Committee members 2 Diary 3 Events 4 Ex Police in Commerce

www.asis.org.ukAUTUMN 20124

ASIS International and the UKchapter in particular are finalists inthis year in two categories.

Firstly in the category Contribution toStandards in the Security Sector forthe work in preparing the ASIS

Physical Security Standard.

ASIS is also a finalist in theInternational Achievement Awardcategory for the outstanding successof the ASIS European Conferencethat was held in London in April.

The winners will be announced at theAwards Dinner in October.

Both ASIS UK Vice Chairmen, MikeHurst of HJA Fire and Security andGraham Bassett of GBR UK arenominated in the SecurityRecruitment Consultancy Category asare Security Management Resourcesand SSR Personnel, both run by ASISmembers.

If other ASIS members arenominated please let us know andapologies for the omission.

Good luck everyone!

ASIS have a stand at this event and, again,we need volunteers to man the stand andpromote the work of ASIS International andthe UK Chapter.

CPE points can also be claimed forassisting on the ASIS stand.

ASIS are participating in the GSS Advice Centreand we need some more volunteers to spend anhour or two on the stand. CPE points can beclaimed for this.

SUBJECTS COVERED ARE• Physical Security (the new standard)

• Security Convergence

• ASIS Women in Security programme

• Military / Police transition into securityprofession

• Overview of ASIS qualifications

Commissioner Bernard Hogan- Howe, Met. PoliceACC Paul Broadbent ACPO Lead on BurglaryAndrew Pope OBE, The Co-operative GroupMike Wyeth, Group Security Director March UKPhillip Hagon, Head of Security, Sainsbury’sMike Marshall, Security Director, Shop Direct GroupAlan Brown, Group Security Director, Tesco

UPCOMING EVENTS

UPCOMING EVENTS

Page 5: ASIS oct12 000 ASIS RiskUK oct12 · 2019-02-11 · AUTUMN 2012 3 2012/2013 DIARY Diary of Events 2012/2013 INSIDE THIS ISSUE: Committee members 2 Diary 3 Events 4 Ex Police in Commerce

www.asis.org.uk AUTUMN 2012 5

EPIC

David Ryan Chairman EPIC (Integrity Assured) Ltd considers:The Role and Importance of theNational Business Crime Forum

The National Business Crime Forum(NBCF) is a key crime reductiongroup and is the first timerepresentatives from cross-business sector organisations havebeen brought together to work withPolice and the Home Office todevelop a strategic business crimereduction strategy

The prime task is to develop acoherent operational strategy thatall business sectors can contributeto and help reduce the burden ofcrime. In an era of constraints on

public sector resources andeconomic uncertainty, it isimportant to develop strategies thatwill help business to make acontribution towards reducing crimeand assist police and others towork more closely with businesses.

The Forum, which held it’s first fullmeeting in March this year isgrowing continually withrepresentation in addition to theHome Office including the ActionAgainst Business CrimePartnerships, the Association ofConvenience Stores, the BritishRetail Consortium, the CBI, theFashion Forum, the NationalFarmers Union, the National FraudAgency, a number of RegionalBusiness Crime Partnerships andnow my own organisation EPIC (ExPolice in Industry & Commerce).

EPIC’s decision to become involvedwas an easy one. In existence for35 years with a membership ofprofessionals in corporateenvironments or self employedwhose background has enabledthem to develop and provideservices , processes and productsacross the whole commercialsecurity environment, it was felt tobe the right time for suchexperience to be used to contributeto the aims of the NBCF.

Four working groups have been

established chaired by businessleaders whose aim is to co-ordinatethe network of national and localbodies who are addressing theirsector or geographic area. Thegroups objectives seek to fosterbetter cooperation andcollaboration between the variousbodies to ensure that businessreceives the best support that itcan, and crucially is able to takeissues forward to national decisionmakers.

Intelligence working group ischaired by Amanda Oliver,managing director of the BusinessCrime Intelligence Bureau.Enforcement is chaired by PhilCollins, Head of Security forBernard Matthews. The Preventgroup is chaired by Brett Lovegroveof CSARN ( City Security andResilience Network) and SusannahHancock of Victim Support is tochair the Reassurance group.

At a time of austerity and difficulttrading conditions for allbusinesses, NBCF is anorganisation whose time has comeand is long overdue.

Ex Police in Commerce and Industry (EPIC)

EPIC (www.epic-uk.com) can be contacted on  0845 5198609 during UK business hours

The only business networkingassociation dedicated to ex policeofficers. 

Page 6: ASIS oct12 000 ASIS RiskUK oct12 · 2019-02-11 · AUTUMN 2012 3 2012/2013 DIARY Diary of Events 2012/2013 INSIDE THIS ISSUE: Committee members 2 Diary 3 Events 4 Ex Police in Commerce

www.asis.org.ukSUMMER 20126

FACEWATCH

How Facewatch links publicand private sectors in thefight against crime, creatingthe biggest opportunity foreffective online collaborationthat has ever existed.

With police budget reductionscausing more than 16,000police officer jobs to be cutfrom the forces, it is now moreimportant than ever to improveefficiency in the fight againstcrime. Simon Gordon (Gordon’sWine Bar) has developedFacewatch, an online crimereporting system which allowsbusinesses to immediatelyreport an incident to the police.

Victims can report a theft tothe police and receive a fullcrime reference, legitimate forinsurance purposes, withinminutes of the incidentoccurring without even leavingthe premises. Through anonline collaboration betweenFacewatch and the police,businesses are able to providepolice forces with a completeevidential package consistingof a statement from the victim,CCTV footage of the crime andan image of the suspect, beforethe suspect has even got to theend of the road. Victims areable to immediately canceltheir credit cards usingFacewatch’s association withCard Protection Plan (CPP), andreceive regular updates byemail on the progress of theircase. This online system meansthat businesses have a direct

link to the police, allowing themto report crime and review theprogress of the cases, whilstgiving them the opportunity totalk to the case officer duringthe process using a built inmessaging service. By creatingthis more efficient system,police time can be saved andtheir resources can be focusedon identifying offenders,making arrests and puttingsuspects before the courts.

Facewatch’s unique screencapture software means thatCCTV and still images can beuploaded onto the website inseconds and are immediatelyavailable to the police.Simultaneously, the still imagescan be accessed by other localbusinesses allowing them toprotect themselves against thesame perpetrators, by spottingpotential suspects as theyenter the premises and therebyprevent the crime before ithappens. This completelyonline system means thatmonitoring stations will be ableto remotely report crime onbehalf of businesses and, usingseparately available facialrecognition system Face Alert itis even possible toautomatically send out securityalerts notifying them of anypotential suspects as theyapproach the premises. Usingthis more effective method ofreporting crimes and capturingCCTV footage, police are betterable to link multiple crimesagainst a single suspect. And

what’s more - Facewatch is theonly online crime reportingsystem that is officiallysupported and accredited bythe Association of Chief PoliceOfficers (ACPO) as an officialpolice security initiative, as wellas being personally endorsedby the most senior police in theUK and the head of the CPS inLondon.

In addition to the web-basedsystem, and downloadable fromall App stores, Facewatch idallows users to identifysuspects in their local areausing their mobile phone.Currently only available toareas within London and nowSurrey, the App gives thegeneral public the opportunityto confidentially assist thepolice in their search forcriminals by identifying stillimages taken from the CCTVfootage. With this system inuse, more suspects are beingidentified and more criminalsare being prosecuted.

Facewatch’s fundamentaltarget is to link businessesboth with each other and thepolice through an onlinesystem, in order to create a“crime fighting” network. Bycreating this network betweenthe private and public sectorsthey have made a moreefficient system for tacklingcrime, saving the time andreputations of businesses andpolice forces alike. As well asreducing the amount of crime,Facewatch enables users toreview statistics and assess thesuccess rates in solvingreported crimes, muchimproving on the accuracy andaccountability/feedbackprocess we have now.

The unique relationship betweenFacewatch and the policemeans that they have createdthe biggest opportunity foreffective online collaboration

Dramatically improve security effectiveness through online collaboration:

Page 7: ASIS oct12 000 ASIS RiskUK oct12 · 2019-02-11 · AUTUMN 2012 3 2012/2013 DIARY Diary of Events 2012/2013 INSIDE THIS ISSUE: Committee members 2 Diary 3 Events 4 Ex Police in Commerce

www.asis.org.uk AUTUMN 2012 7

FACEWATCH | SPRING DANCE

between private and publicsectors that has ever existed.The prospects for expansion anddevelopment of this system intomonitoring centres who couldact as the intermediary for allbusinesses using networkedCCTV is one that allprofessionals in security shouldbe looking to leverage. It willnot be long before mostbusinesses simply outsource themonitoring their CCTV to ARCswho would then have access tomillions of cameras – imaginethe power of this if there were tobe a terrorist incident, everyoneworking together online rather

than having all the data sittingon individual DVR’s in eachpremises.

How can you get involved andhow does Facewatch survivecommercially if it is free toeveryone? Facewatch is anopen source platform that canbe linked to any other systemwhich is allowed to have accessto it, including Apps forprofessional use. If you link toFacewatch they ask for a smallproportion of your revenuesarising from the added valuethat this generates for you andyour clients. Everyone wins.

Contact: Simon Gordon formore information –[email protected]

www.facewatch.co.uk

The Worshipful Company of Security ProfessionalsPROUDLY PRESENTS

A Black Tie Spring DanceAT THE

Rembrandt Hotel Knightsbridge SW7 With Elwood & Jake - The Blues Brothers

keeping you entertained all night

Saturday 2nd March 2013Reception 6.45pm for 7.15pm

Tickets are £108.00 incl VAT

Entertainment throughout the evening • Charity Raffle & Auction

Carriages at 12.30 am

Enquiries to Peter French – [email protected]

Registered Charity No. 1088658

Page 8: ASIS oct12 000 ASIS RiskUK oct12 · 2019-02-11 · AUTUMN 2012 3 2012/2013 DIARY Diary of Events 2012/2013 INSIDE THIS ISSUE: Committee members 2 Diary 3 Events 4 Ex Police in Commerce

www.asis.org.ukAUTUMN 20128

CYBER

Cyber is a word weuse frequently todayand think nothing ofit, but, how much dothe general publicreally understandabout the wordcyber? This guide isintended to help thesecurity professionalexplain some of thebasics to theuninitiated.

What is Cyber?

Cyber is a relatively new word inour everyday language, so whatdoes it mean? Well theDictionary definition of cyber is:

‘Relating to or characteristics ofthe culture of computers,information technology, andvirtual reality.’

The word cyber originates fromthe Greek word kybernetesmeaning ‘steersman’ or‘governor’, and came intocommon use vocabulary around1991; however Norbert Wienerfirst used the word ‘cybernetics’in a 1948 publication‘cybernetics or control andcommunication in the Animaland the Machine’.

THE DANGERS

Hacking

Hacking is the ability to find aweakness in a computer or anetwork of computers. Normallythis is undertaken by someonewith advanced knowledge ofinformation technology. Thereare two types of hackers: ethicalhackers (White hats), thoseemployed to find and close thenetworks weakness and thosewho are motivated to exploit thecomputers weakness for

personal or criminal (Black hats).Currently used as a form ofprotest against largeorganizations, namely theanonymous and LulzSec groups,who have successfully infiltrated:Amazon, PayPal, MasterCard andVisa to name just a few. Thehacktivists (hackers who usetechnology to state publicly asocial, ideological, religious orpolitical statement) as they areknown published the documentsand data it stole to embarrassthese organizations’, howeverthe real victims are thecustomers of theseorganizations just as much asthe organizations themselves.

Cracking

A cracker is someone, whobreaks into a computer/networkby discovering and recoveringyour password or by-passing italtogether. Passwords are yourfirst line of defence so they arevery important to employ goodpassword practices. Do notmake your passwords obvious orsimple (see Julie Lorraine theimportance of passwords, winteredition 2011).

Malicious Software

Malicious software or malware isa piece of software that can aidea hacker to gain unauthorizedaccess to yourcomputer/network, enablingthem to acquire/trackinformation and data held onyour system which may besensitive. It is also the generalterm for any program installedwith the intention to do damage.Malware come is various forms:computer viruses, Trojans,worms, spyware, adware,keylogger, rootkits andcrimeware etc...

A computer virus in simpleterms, and let’s face it, it’s moreunderstandable to the majorityof us in simple terms is aprogram that can replicate itselfand spread from one machine toanother with potentiallydevastating result.

A Trojan is a program that claimsto be something that it isn’t likea game. It in fact a Trojan hasthe potential to erase your harddrive.

A worm is a self-replicating virusthat uses parts of the operatingsystems that are automatic adusually invisible to the end user.They don’t normally cause harmas such to the network, and arenormally noticed whenuncontrolled replicationbecomes sluggish or stop theprogress of other tasks.

Spyware is hidden softwaresecretly installed onto yoursystem to collect informationabout an individual’s activity oran organization and is bydefinition hard to detect.However data collectingprograms that have beeninstalled with the users’ priorknowledge are not technicallyspyware providing the userunderstands what information isbeing collected and who iscollecting the information.

Adware or advertising supportedsoftware automaticallydownloads and displays advertslike banners or pop-ups when auser is online. Its purpose is togenerate income for the creator.Adware itself is harmless; it’swhen spyware or keyloggers areattached that it becomesharmful.

Keylogger is a program installedunbeknown to the end user ontothe computer system andrecords every keystroke made bythe user. This is normally donein order to fraudulent access topasswords or other sensitive orconfidential information.

Rootkits are a set of programswhich provide unauthorizedaccess at administrator-level to acomputer/network. They aregenerally installed by ahacker/cracker once they havegained access at user-level byexploiting vulnerabilities withinthe infrastructure or by crackinga user’s password. A toolkitonce installed enables the

Cyber – Back to Basics – Definitions

Page 9: ASIS oct12 000 ASIS RiskUK oct12 · 2019-02-11 · AUTUMN 2012 3 2012/2013 DIARY Diary of Events 2012/2013 INSIDE THIS ISSUE: Committee members 2 Diary 3 Events 4 Ex Police in Commerce

www.asis.org.uk AUTUMN 2012 9

CYBER

www.asis.org.uk 9

attacker to install other malwareand go undetected.

Crimeware is malwarespecifically designed to facilitatecriminal activities online, andrepresents an increasingproblem in network security.Identity theft is one use to gainaccess to various sources ofpersonal or company financialinformation.

Cyber Crime

We tend these days to think ofcybercrime as the headlinegrabbing cases involving highprofile corporations andagencies, we don’t even thinkanymore about banking andshopping online as a threatanymore as they are no longergiven press coverage, but thistype of crime still takes place.

Not only does it still take placebut it’s easier than ever to gainillegal access to your bankaccount, especially if you bankonline or use an app for yoursmart phone.

Cyber Bullying

‘The use of electroniccommunication to bully aperson, typically sendingmessages of an intimidating ortreating nature.’

First used by Bill Belsey aCanadian anti-bullying activist,relating to the use of informationand communication technologiesto deliberately and repeatedlyuse hostile anti-social behaviourtowards an individual or groupwith the intention ofvictimization and humiliations ofthe individual or group.

However, this type of behaviourcan now continue even outsideof the main environment as thebully will seek out the individualor group and text or postremarks to various onlinewebsites or to a cell phone.Making in vitally important tomonitor and eliminate rapidly.

Social Networks

Since the early 90s there hasbeen a plethora of onlinewebsites that enable us tocommunicate quite often in real

time with people all over theworld. We can post photos offriends and family; add your‘status’ this is normally what youare doing, where you are goingand when, who you are with orhow you are feeling. Great! Ormaybe not so great.

Why is it not so great? Well wequite often forget all outinhibitions’ forget personalsafety and security. Maybe weshould ask the question ‘howmany of your ‘friends’ have youever met in person? More thanthose you have probably. Initself it’s not a problem but, it’sa great source for a criminal togather personal information thatcan be used for illegal activities.

Criminals aren’t the only peoplewho use social networking sitesto gather information about anindividual it’s a great source ofinformation to a potentialemployer too. So maybe that‘can’t wait we’re off onholiday/vacation in x number ofdays’. Now anyone who knowswhere you live knows your houseis unoccupied and for how long.

Or the ‘my boss is an idiot and Ihate my job’ status wasn’t sucha great idea. Not to mention thedrunken half naked photo youposted or worse a ‘friend’posted, highlighting the problemthat you don’t always havecomplete control on a socialnetworking site. It’s also a greatway for crackers to identify likelypasswords.

Don’t get it wrong they really area great way of keeping in touchwith friends and family; just bemindful of what information youor your friends are postingabout you.

Cyber Security

Cyber security is a vitallyimportant defence against dataloss; identity theft andunauthorized access of yourcomputer/network. There arevarious measures that can beapplied: a good firewall orantivirus program installed onthe computer/network. Thesedefences need to be regularlyupdated and checked. A goodoffence is the best defence to

coin a phrase. It’s important toremember that we are allpotential targets for the hackers,crackers and criminals, and wecan all catch a bug!

Organizations can now takeadvantage of cyber security testranges which are speciallydesigned to emulate yournetwork infrastructure in a safecontrolled environment. Thusenabling them to evaluate theresilience to cyber attacks, andfix any issues withoutjeopardizing sensitive data.Once this has been undertakenthere should be (but currentlyisn’t) a trade mark badgeprovided that states when thenetwork was tested and a retestdue date, so that customers canbe more confident duringperiods of validity and well asextra vigilant towards expiry ofthe trade badge test mark.

Cloud Computing

This is the practice of using anetwork of remote servershosted on the internet to store,manage and process data,rather than a local server orpersonal computer.

Julie Lorraine worked in transportlogistics in the oil industry, before

graduating from University ofPortsmouth with a BSc in Criminology

and Sociology degree. She becameinterested in investigating CyberCrime and Cyber Security whilst

working for a US defence company.

Page 10: ASIS oct12 000 ASIS RiskUK oct12 · 2019-02-11 · AUTUMN 2012 3 2012/2013 DIARY Diary of Events 2012/2013 INSIDE THIS ISSUE: Committee members 2 Diary 3 Events 4 Ex Police in Commerce

www.asis.org.ukAUTUMN 201210

TWITTER

TWITTER.COMSome Twitter users you may want to follow.

If you have other suggestions please send theto [email protected]

ASIS Tweets

@ASIS_Intl

@eduardemde – ASIS President Eduard Emde

@ASIStweets

@CSORoundtable – Head of CSO Roundtable

@_MikeHurst ASIS UK Vice Chairman

Others

@ISC2

@CEOPUK Child Expolitation and OnlineProtection

@CyberchallengeCyber Security Challenge

@bbw1984 Big Brother Watch

@libertyhq Liberty

@ngargan_npiaChief Executive NationalPolicing Improvement Agency

@policesupersThe Police Superintendents’Association

@CSARN_UpdatesCity Security and ResilienceNetworks 

@TheSecurityCo

@BBCNews

@metpoliceuk

@ProfsecmanProfessional SecurityMagazine 

@FrankRGardnerBBC Security Correspondent

@PoliceFedChair - The Police Federation

@1stsecuritynews

@ChatbackSy

@GetSafeOnline

@foreignofficeForeign & Commonwealth Office

@SIAukThe Security Industry Authority

@securityspeak

@TheSecurityLion - Brian Sims, UBM

Page 11: ASIS oct12 000 ASIS RiskUK oct12 · 2019-02-11 · AUTUMN 2012 3 2012/2013 DIARY Diary of Events 2012/2013 INSIDE THIS ISSUE: Committee members 2 Diary 3 Events 4 Ex Police in Commerce

ASIS International and the InternationalInformation Systems SecurityCertification Consortium (ISC)², signed aMemorandum of Understanding at theASIS International 50th Annual Seminarand Exhibits, held in Dallas in 2004.The purpose of this MoU was to Cross-Endorse Certifications To AdvanceSecurity Profession.At that time ASIS had 33,000 members as opposedto 38,000 today.

In recent years the ASIS International AnnualSeminar and Exhibits and the (ISC)² Congress havebeen collocated: this year it was in Philadelphia.

Education is at the heart of both organisations withthe ASIS CPP, PSP and PCI certifications and the(ISC)² SSCP, CAP, CSSLP and CISSP being worldleaders in their respective areas. CPP is celebrating

its 35th anniversary this year.

Vice Chairmen Mike Hurst, Graham Bassett have metwith Sandip Wadje and Obine Adoh of (ISC)² andMike also took part in the recent meeting of theLondon Committee.

There are many potential areas of mutual benefitand hopefully the relationship can grow and extendto other IK Chapters as they get established.

As mentioned previously, the first joint event will be aWomen in Security meeting, in October, but it isexpected that there will be other events in 2013.Which as mentioned previously id the 20thAnniversary of ASIS Chapter 209 being granted itsCharter.

www.asis.org.uk AUTUMN 2012 11

CHAPTER COLLABORATION

(ISC)² London Chapter waslaunched in July 2012 toprovide the (ISC)²  members inLondon with the opportunity tobuild a local network of peersto share knowledge, exchangeresources, collaborate onprojects, and createopportunities for members toearn CPEs. 

ASIS International UK Chapterhas been supportive of the(ISC)² London Chapter sincethe beginning and both thechapters are consistentlyexploring the opportunities ofmutual interests to itsmembers.  One of the keyinitiatives taking shape at themoment is collaboration on theWomen in Security subgroup ofthe (ISC)² London Chapter. 

The Women in Security (WiS)group is an exciting initiativefrom the (ISC)² LondonChapter to promote networking,education and careeropportunities for the women ininformation security.

The key objectives of this groupare-

Organise networking events todiscuss the topics of interest

Organise knowledge sharing ortraining sessions

Provide coaching or mentoringto the new or junior members

Create a common platform formembers from differentprofessional organisations tocollaborate or network

The first social event of thegroup recently took place at

Central London where themembers were able to meeteach other in person andexchange ideas on the focusand activities of the WiS group.The Women in Security group ofASIS and WiS are currentlyworking together to organise aconference in October.

If you are interested to knowmore details on the activities ofWiS of (ISC)² London Chapterand the planned conferenceplease contact us at the emailaddress [email protected]

ASIS International UK Chaptercollaboration with (ISC)² London Chapter

Page 12: ASIS oct12 000 ASIS RiskUK oct12 · 2019-02-11 · AUTUMN 2012 3 2012/2013 DIARY Diary of Events 2012/2013 INSIDE THIS ISSUE: Committee members 2 Diary 3 Events 4 Ex Police in Commerce

www.asis.org.ukAUTUMN 201212

EUROPEAN CONFERENCE

ASIS International 12th EuropeanSecurityConference & Exhibition

Join colleagues from around the world in Sweden!

ASIS International will host the 12th European SecurityConference & Exhibition in 2013 in Gothenburg,Sweden. Set for April 14-16, 2013, this uniqueconference event will address a full spectrum of topicsin security management such as: supply chain security,loss prevention, hotel security, intellectual property,maritime piracy, terrorism, executive protection, internaltheft and fraud, competitive intelligence, brandprotection, physical security, cyber security,investigations, due diligence and global business issues.

Horizontal learning - use examples, lessons learned, andcase studies presented by security professionals whowork in diverse sectors and geographies and apply themto your own situation.

Connect with peers in security management from around the world. Shareexperiences and exchange ideas. Gain valuable new insights and perspectives onsecurity challenges faced regionally in Europe, as well as those that extendglobally.

IMMERSE YOURSELF IN THREE DAYS OF:• Educational sessions (Keynotes, case studies and panel discussions)

• Networking events (President's Reception, lunches, coffee breaks) AND

• Update yourself on the latest in security services and technology in our enlargedtrade exhibition

Early Rate on/until Regular Rate15 Mar 2013 after 15 Mar 2013

ASIS Member €850 €970

Non Member €1,050 €1,170

Single Day €515 €630

Partner Organisations €895 €995

Group Rateincludes receptions €800 €900

Partner Association Rateincludes receptions €915 €1015

President's Reception(included in full delegate rate) €130 €130

Exhibition Only (rate per day) € 30 €30

www.asisonline.org/gothenburg

Page 13: ASIS oct12 000 ASIS RiskUK oct12 · 2019-02-11 · AUTUMN 2012 3 2012/2013 DIARY Diary of Events 2012/2013 INSIDE THIS ISSUE: Committee members 2 Diary 3 Events 4 Ex Police in Commerce

www.asis.org.uk AUTUMN 2012 13

PROJECT MANAGEMENT

Designed in partnership withsecurity professionals forsecurity professionals theLMBS MSc in ProjectManagement offersexperienced securitypractitioners with ASISInternational CPP/PSP orprofessional qualificationsfast-track entry throughaccreditation of prior-experience. ProjectManagement is a recognisedmanagement tool to enhancesecurity practice through adefined set of measurableand auditable processes. Fast track credit is available fora maximum of 3-modules whichenables direct entry at Post-Graduate Certificate level,candidates study 3-modules forthe Post-Graduate Diploma andfinal successful completion ofthe dissertation (20,000-words)achieves the MSc in ProjectManagement (APM/ IPMAaccredited).

Quality Assurance

The LMBS MSc has been qualityassured and accredited by theAssociation for ProjectManagement and InternationalAssociation for ProjectManagement (AMP-IPMA). APMis an accredited InformationAssurance certification providerto UK Government. LondonMetropolitan University isaccredited through Professional,Statutory and Regulatory Body(PSRB): including, the USMiddle States Commission on

Higher Education, MSCHE, theBritish Computer Society, theLaw Society and the RoyalInstitute for British Architects,RIBA. PSRB requires theUniversity to satisfy that thelearning and achievement bystudents meets PSRBprofessional benchmarks: awardof an accredited degree mayallow a graduate to qualify for aparticular type of employmentand/ or gain exemption fromPSRB examinations.

Fees (2012) (2013 tbc)

UK / EU full-time £8,100, part-time £900 per-module,International full-time £13,500

Prior-experience maximum 3-modules credit

London based, classroomteaching, Block teaching/distance learning option -available in the near future

Teaching team

Security, business experts andVisiting Professors, including,Professor Mike Alexander MScFSyI BEM, ASIS UK Chairmanand global head of security andsafety at Henderson GlobalInvestors, Quandom ProfessorLester Hillman former head ofsafeguarding Channel TunnelRail Link Project, ProfessorCharles Hampden-Turner(Cambridge Judge BusinessSchool), Professor MichaelJefferson (Royal Dutch Shellchief economist) and a team ofexperienced academics and

researchers with teaching andlearning qualifications for highereducation.

LMBS aims to produce London’smost business-ready graduatesand we will encourage and helpyou to get involved withLondon’s expert projectmanagement, risk and securitycommunities.

MSc Project ManagementModules

• Project ManagementFoundations

• Project Management Systemsand Practice [MS® Project]

• Project Management Riskand Finance

• Project ManagementOrganisation and Behaviour

• Research Methods

• Free Module: IT Security,Crisis and DisasterManagement, AdvancedFinancial Reporting,Psychology, InternationalCrime, Marketing andCommunications, work-placement module available

• Dissertation, candidates’choice of projectmanagement in security (pre-requisite Research Methods)

Includes PRINCE2® training andstudy-support / coaching to helpreturners get back to study.

For more information pleaseemail MSc Course LeaderAllison [email protected]

MSc – Project Management(APM/ IPMA accredited)

Page 14: ASIS oct12 000 ASIS RiskUK oct12 · 2019-02-11 · AUTUMN 2012 3 2012/2013 DIARY Diary of Events 2012/2013 INSIDE THIS ISSUE: Committee members 2 Diary 3 Events 4 Ex Police in Commerce

www.asis.org.uk14

LEGAL UPDATE | ASIS INTERNATIONAL

AUTUMN 2012

Legal Update — Claudia Gerrard The Transfer of Undertakings(Protection of Employment)Regulations 2006, usually knownas TUPE, are particularlyimportant to the security industry.Traditionally, work is allocated onthe basis of fixed term contracts.So, what happens when thecontract comes to an end?

Take a recent client query. Theclient wanted to terminate theemployment of a security officer.That seemed simple enough. Butthen the client mentioned thatthey had lost a security guardingcontract and a new contractor hadbeen appointed.

In that instance, TUPE applies andstaff will automatically transfer tothe new contractor. The newcontractor cannot refuse toemploy existing staff or changetheir terms and conditions. Thereis no discretion to terminate staff.

And staff are entitled to retain allexisting rights and benefits.

Often, though, companies areunaware of their obligations untilit is too late. And that is oftenwhen an employment claim ismade by staff whose contractsshould have been transferred andnot terminated.

It is estimated that between 60% and

80% of the legislation that currently

affects professionals and businesses

throughout Europe is decided in

Brussels: industry standards,

pharmaceuticals, competition, trade,

funding of scientific research,

environment, professional

qualifications, health & safety rules,

consumer protection and food safety

regulations, etc. For this reason,

almost every business sector and

many professions are represented in

Brussels through a trade or

professional association, including

hundreds of non-EU interest groups.

The European commission frequently

calls on external specialists to sit on

expert groups or advise as external

consultants. The type of expertise

may be scientific knowledge and/or

knowledge derived from practical

experience. This opens up

opportunities for associations. By

positioning their people in these

roles, they can exert influence

through the expertise of its

members. Similar opportunities exist

with EU funded projects and thematic

networks for which vast funding

opportunities are available through

programmes such as Framework

Programme 7 (FP7) to be renamed

Horizon 2020 starting 2014.

For these and other reasons a

working group of ASIS Europe

voluntary leaders have studied the

ways and means for ASIS Europe to

gain an adequate and appropriate

profile within Europe and move

towards being part of the decision

making process.

Roger Warwick, CPP, RVP Region 27A,

has also been tasked to chair the EU

Liaison Sub Committee (ELSC). Roger

is in the process of putting together a

group of ASIS Europe members with

appropriate experience and contacts,

at both national and European level,

with public sector decision makers.

The intention is that the ELSC shall

have a balanced composition of

nationalities, corporate security

managers, consultants and

practitioners. The Committee will

promote and coordinate actions, such

as the participation in EU events, to

be taken at national and EU level.

It also intends creating an Advisory

Council. All European based

members of the CSO Round Table are

invited to join.

This project has the full backing of

our President Eduard Emde, CPP and

is supported by the ASIS

International EMEA Bureau.

Any members who are interested in

joining the ELSC or simply in

lending a hand are invited to

contact Roger Warwick

at [email protected].

Claudia Gerrard

Legal Consultant, Excello Law

[email protected]

Claudia specialises incommercial and employmentlaw, particularly in relation to thesecurity industry. This includesall aspects of commercial law,contractual matters, TUPE, DataProtection, tenders, franchising,web agreements and someaspects of IT and IPR. She hasalso given legal talks recently atevents hosted by ASIS, IFSECand EPIC.

She is a member of ASIS UK andACS Pacesetters. As part of herwork, Claudia also writes amonthly legal column inProfessional Security magazineand ad hoc articles for otherjournals.

Claudia is offering fellow ASISmembers the first half hour’sconsultation free and, thereafter,a reduced hourly charge.

ASIS International EU Liaison Sub Committee (ELSC)

Page 15: ASIS oct12 000 ASIS RiskUK oct12 · 2019-02-11 · AUTUMN 2012 3 2012/2013 DIARY Diary of Events 2012/2013 INSIDE THIS ISSUE: Committee members 2 Diary 3 Events 4 Ex Police in Commerce

www.asis.org.uk AUTUMN 2012 15

ASIS INTERNATIONAL

It’s called ASIS International for a reasonSometimes it’s worth remembering that ASIS has38,000 members in over 200 chapters across theworld. Even where there is no chapter, there maybe members: 100+ UK members work overseas.

There are 31 Council s which serve themembership through identification of informationregarding security issues in specific concentrations.

Council topics range from Educational Institutions toCrisis Management and Business Continuity, andfrom Crime and Loss Prevention to Global Terrorism,Political Instability and International Crime.

So if you do travel or have internationalresponsibilities, there are resources and people thatare there to make your work life easier and better.

In July the Worshipful Company of SecurityProfessionals hosted their first YoungMembers Group, networking event at TheWater Poet, London E1. ASIS was represented by Vice Chairman—Operations Graham Bassett.

It was well attended and good to see many newyoung faces that have joined the securityprofession – there was a great buzz and many newfriends and contacts were made.

It was a successful evening and special thanks toCIS Security for sponsoring the venue andrefreshments.

L-R

Justin Morgan- Spitalfields EstateSecurity Manager

Amanda McCloskey- CIS SecurityBusiness Relationships Manager

Graham Bassett – ASIS ViceChairman

Henry Millard – Kings CollegeDepartment of War Studies

Neill Catton- CIS Security OperationsDirector

We are looking for someone to leadour ASIS Young Professionalsprogramme: interested?

Contact Mike Hurst: [email protected]

Page 16: ASIS oct12 000 ASIS RiskUK oct12 · 2019-02-11 · AUTUMN 2012 3 2012/2013 DIARY Diary of Events 2012/2013 INSIDE THIS ISSUE: Committee members 2 Diary 3 Events 4 Ex Police in Commerce

ASIS in the UK is pleased to work with and/or support anumber of security organisations and charities. Some ofthese are associations are long standing other are new

and will hopefully become long standing.

If you are involved with an organisation would like todiscuss a mutually beneficial relationship, pleasecontact ASIS Vice Chairman —Strategy, Mike Hurst

([email protected])