Starting next week, I will start writing about a weekly topic in security. As you have seen over my short blogging history, I have touched on an array of different topics trying to get a feel for what people want to read about. Next week’s topic will be based around Identity Theft. I will provide 5 blogs about different ways thieves steal your personal information, what they do with it, and how to avoid it. As I have stated before, I have no affiliations with any vendors that I speak about, other than my own company, Security Management & Resources Team, which is a consulting firm specializing in corporate security management. My firm’s innovative management method makes it possible for me to offer the highest level of physical security for the lowest cost possible. My blog is meant to educate people about the nasty things happening to people, and how to avoid them. I look for real world topics that apply to a wide range of people, groups, and situations. If you have anything specific you would like me to write about, please send me a message on twitter (@thesmrt) or via email: firstname.lastname@example.org. I am always looking to see what people are worried about and provide them with the accurate information with hopes of easing those worries. To those who continue to read my blog, thank you, and I promise to keep writing about the topics that matter to you.
Property managers are about as security savvy as your 13 year old kid is. Why? Because why should it be their job to care about your security? Honestly, they have a point in this matter, except… Liability! So, the new gig I started at this week is a glaring example of what I am talking about. The building is owned by a third party, managed by yet another party, and has roughly 15 tenants. The layout of the building is pretty standard, with 10 floors, the first floor being open and airy. Now, have you seen the really nice, really big planters that they put in front of doors near the sidewalks? Perhaps you have seen lights instead of planters? These are vehicle barriers, not decorations. Underneath that decorative concrete is a thick piece of hardened steel. This ten story high rise I now work in does not possess these barriers. Why do I care? Well, I work in the information security field for financial companies; banks, financial services, etc, and these are prime targets! The building I am in contains accountants, a few bank branches, a couple of mortgage companies, and a couple of other financial institutions. The key take away from this, the building is a HUGE target, and it is very vulnerable.
How do you go about mitigating the vulnerabilities of a site like this? Simple, a site survey needs to be conducted to point out your weak points. It is better to hire a company to perform this survey for you, as you will then have a professional report of the vulnerabilities present, and the report will be by an unbiased party. To ensure you are getting the best analysis, find a group that does not have ties to a specific vendor. If you are in the Dallas/Fort Worth area, send me your information, and I will provide you with a bid for the survey to help you find a price point. Just remember, you want a person who will think outside of the box when it comes to what a criminal will want to do, or will try to do. Some key factors to look for if you are going to try and conduct your own survey:
Do you have security doors (steel reinforced)? Do they fail open during emergencies?
Do you have cameras that can view the entire property? Are you able to see all entrances/exits to the property?
Do you have car barriers protecting glass doors?
Do you have a 24/7 guard service providing officers to your site? Does your contract include liability insurance for the officers?
Do you have a badge system? Is the user database current?
Do you have a parking garage? Do you control its use? Do officers provide escorts during dark periods?
These are just a sample of things you will want to see in a site survey.
Finally, once you have the survey completed, do not allow it to become public! Fix the vulnerabilities if you can, and remember, a layered defense is always the best defense. Use both overt and covert security practices/tools, and keep them secret!!!
Protect your information, protect yourself. Coffee is brewing people; it is time to wake up!