pa awwa2006 presentationrev1fin_feb

Wivenhoe Management Group

Has Your New Security System Increased Has Your New Security System Increased Your Facility’s Liability?Your Facility’s Liability?


Public Health Security Public Health Security Bioterrorism and Response Act Bioterrorism and Response Act

(PL107-188) June 2002(PL107-188) June 2002

• All water facilities with 3,300 users or more, initiate a vulnerability assessment (VA).

• The recommendations arising from these VA’s included those related to security improvements.

• Costs for such security improvements are very substantial, and in many cases, simply cost prohibitive.


Flowchart ofFlowchart ofRAM-WRAM-WSM SM MethodologyMethodology

Site Characterization

ProjectKickoff

Facility Prioritization&

Threat Assessment

ConsequenceAssessment

FaultTree

Analysis

Security SystemEffectiveness Analysis

Risk Analysis&

ReductionPlan

VulnerabilityAssessment

Report

Review ofDocumentation

ERP Update

PlanningSecurity

Enhancements

Utility Operations & Planning


Vulnerability AssessmentVulnerability Assessment RecommendationsRecommendations

Included:• Security Improvements• Mitigation• Other


Implementation of New Security Implementation of New Security SystemsSystems

• Access Control• CCTV Camera

Surveillance• Perimeter Fencing• Intrusion Detection


New Security Systems in PlaceNew Security Systems in Place

• Everyone Happy• Risk Reduced as per VA

Recommendations• Just One Possible Problem……


Your New Security Systems May Your New Security Systems May Have Significantly Increased Your Have Significantly Increased Your

Liability, Even to the Point of Liability, Even to the Point of Negligence or Gross NegligenceNegligence or Gross Negligence


The Reason for Increased LiabilityThe Reason for Increased Liability

• A Simple Step That Was Overlooked Or Deemed Unnecessary When It was Decided To Implement The VA Recommendations And Install New Security Systems

• GOOD SECURITY DESIGN CRITERIA


StatementStatement

Many Security Systems Are Many Security Systems Are Installed Without Being Designed, Installed Without Being Designed, And More Importantly, Without And More Importantly, Without Proper Design CriteriaProper Design Criteria


Lack Of Design CriteriaLack Of Design Criteria

Leads to Four Major Problems:

1) Inadequate Counter Measures to meet Threat Level

2) Faulty Security System Design

3) Inability to Support Installed Security System

4) Possible Legal Consequences


Industry QuoteIndustry Quote

• In the security environment of “Post 9/11”, and given the media scrutiny of all key infrastructure, it would be unwise if not reckless, to implement new security systems without adequate design, and good design criteria in keeping with industry standards


Steven S. WilderSteven S. Wilder

• President & Chief Operating Officer

Sorensen Wilder & Associates

Bradley, Illinois


Inadequate SecurityInadequate Security

• Failure To Detect• Failure To Surveil• Inadequate Perimeter Security• Inadequate Security At All Critical

Assets• Inappropriate Equipment• Does Not Provide Adequate

Protection To Meet Threat Level


Exterior Door HingeExterior Door Hinge


FencingFencing


Alarm WiringAlarm Wiring


Door ContactsDoor Contacts


Difficult To ProtectDifficult To Protect


Fencing and Jersey BarrierFencing and Jersey Barrier


Faulty Security SystemFaulty Security System

1) Does Not Meet Intent

2) No Integration

3) Monitoring Inadequate

4) Wrong Equipment


Security Professionals AgreeSecurity Professionals Agree

Good Security Design and Design Criteria is Essential to Successful

Security System Operation


Consultants In AgreementConsultants In Agreement• Jim Woodruff• American Consulting

Engineers

• Tom Pecoraro• Labor Management

Concepts

• Gil Fallon• Attinco

• Walter Adams• Rolf Jensen &

Associates

• Ken Burris• Environmental

Resources Management

• David Rockford• The Wickford Group


ExamplesExamples

• Perimeter Detection– Environment– Dual Technology


ExamplesExamples

• CCTV Camera Surveillance– Resolution– Field of View– Positioning– Fixed Versus Mobile (PTZ)– Recording– Lighting


ExamplesExamples

• Alarm Systems– Supervised System

– Positioning of Devices

– Motion Detectors


ExamplesExamples

• Access Control– Electro-Magnetic Locks– Fire Code– Types of Reader Device


ExamplesExamples

• Identification– Ability to Read at a

Distance– Symbols– Counterfeit Measures


Inability to Support Inability to Support Security System DesignSecurity System Design

Procurement sends out RFP to local security contractors for “Security System”

Security Contractor installs what they think will “do the job”

When something happens, you are the one that will have to answer various questions posed by the Defense Attorney…..


Likely Questions….Likely Questions….

1) Why did you use this equipment– Cameras– Motion Detectors– Type of DVR– Intrusion Detection Equipment– Type of Fence


Likely QuestionsLikely Questions2) Explain the reasons for installing

this type of security system?

3) Why did the security only attempt to cover the outer perimeter?

4) Why were Insider threats ignored?

5) The following people had clearance for all access points……. Why?

6) What was the Design Criteria for the security system?


Importance of Good Design Importance of Good Design Criteria That Is Consistent With Criteria That Is Consistent With Security Industry RequirementsSecurity Industry Requirements

• Provides a Qualified Reason for All Aspects of the Security System

• Explains why certain decisions were taken in the design of the system based on Weighted Objectives

• Justifies the Level of Protection against the Threat Level


System Already InstalledSystem Already Installed

There are several options1) Review System2) Prepare Sound Design

Criteria3) Modify Equipment4) Add to System5) Add Deterrent Factor


SummarySummary• Results of Vulnerability Assessments• New Security Systems & Measures• Designed to Industry Standards….Or• Increased Liability• Security Design Criteria• Examples• What To Do Now


Benefits Of Good Design CriteriaBenefits Of Good Design Criteria• Sound Basis of Design to Industry Standards• Provides Foundation for Security System• Establishes Optimum Protection Level in

Keeping with the Identified Threat (DBT)• Provides Clear Reasons for Types of

Equipment and Positioning of Such Equipment

• Likely to Prevent Possible Charges of Negligence or Gross Negligence


QuestionsQuestions

www.wivenhoegroup.comwww.wivenhoegroup.comPhone: 609-208-0112Phone: 609-208-0112

E-mail: [email protected]: [email protected]

pa awwa2006 presentationrev1fin_feb

Documents

type of security system

security professionals

inadequate security

security industry requirements

security environment

local security contractors

sound design criteria

adequate design