Page 36 - the SyI Quarterly 10

Security Community
Institute Community
Security threats and the best
practice to stay one step ahead
Noah Price, Head of the G4S Academy, provides an overview of the security
threats faced by many businesses and organisations, as well as a useful
reminder of what makes good security, to help stay one step ahead.
Terrorism
With the current threat to the UK from terrorism rated as ‘substantial’,
meaning that an attack is likely, terrorism is one of the biggest security
concerns for many.
Attacks could potentially occur at any location. Preventing them is
challenging, with the target usually an individual choice that cannot always
be anticipated.
Activism
Activist groups that could pose a threat include Extinction Rebellion, Insulate Britain and the anti-vax
movement, with the likelihood of an increase in activity through Spring of 2022.
Covid-related Protest
Protests against Covid vaccinations are carried out by a wide range of different groups and individuals.
According to an investigation by The Times, some anti-vaxers are turning to extremist beliefs and advocating
violence against healthcare workers.
Urban exploration
The trend for people to trespass into buildings to explore, climb and post videos of their activity, poses a
significant threat.
Risks include physical danger to the climber on a business’s property, legal action against the building’s
owners if the intruder is injured or killed, disruption to business operations, particularly if an evacuation
is required and damage to property. As content is usually posted on social media, there is also the risk
of reputational damage and of hostile reconnaissance being available to organised criminal gangs and
terrorists.
Insider threat
Insider threat can take many forms. It could be:
● A ‘deliberate insider’ that obtains employment with the intent of abusing their access.
● A ‘volunteer/self-initiated insider’ who obtains employment without intent to abuse their access, but
at some point, decides to do so
● An ‘exploited/recruited insider’ who obtains employment without intent to abuse their access, but at
some point, are exploited or recruited by a third party to do so
● An ‘accidental insider,’ who by their actions might inadvertently leak information or provide other
types of access, either because they haven’t received adequate training, or because they have been asked
to undertake an action that they don’t recognise as being something they shouldn’t do.
Accidents, fire, natural disaster. Accidents can happen at any time, and there is also the chance that
organisations could be affected by fire, flood or another natural disaster.
Covid
Covid is a threat to security on many levels, from risks associated with new ways of working to potential staff
shortages. The pandemic has led to significant changes in ways of working and this has made cyber security,
as well as physical security, a real challenge for many organisations.
Theft
Many organisations focus on securing physical items and equipment. However laptops, dongles, and even
36
employee passes used remotely can be vulnerable to theft and the loss of these devices can often lead to an
increased risk of data theft.
Conflict and Harassment
Altercations can take many forms including conflicts between employees, or issues with voyeurism or
harassment from within or outside the business.
THE FUNDAMENTALS OF GOOD SECURITY
Here is a reminder of the key elements that need to be in place, in order to achieve good security to help
stay ahead of the threats.
Regular risk assessment and planning
With regular risk assessment and planning the foundation of good security, it’s important to consider
whether the organisation’s risk assessments and plans are up to date.
Have there been any changes in the assets that need to be protected? People, property, information
or reputation? Have the threats to these assets changed or evolved and are there any new or changed
vulnerabilities?
Does the security plan still protect the assets with appropriate integrated security solutions, or are there any
weaknesses or gaps?
Regular testing
In the same way that businesses use penetration testing to test cyber security, physical security should be
tested against various scenarios.
Table-top exercises can be an excellent way to identify possible weaknesses and ensure preparedness in
advance of a real incident. They should use relevant scenarios and identified threats to help test mitigation
plans and training.
Training
With threats constantly evolving, it’s more important than ever to focus on training. Organisations benefit
hugely from thinking about training in a more holistic way. While security officers must receive training that is
relevant to their customer’s assets, procedures and identified threats, clients can also benefit by encouraging
their employees to take part in relevant security training and by involving the security team in their own in-
house training.
Working in partnership
The best security solutions will be achieved when security providers and clients work together, sharing
desired outcomes, plans and information as part of an iterative process. This close collaboration can also
lead to cost and time savings.
Developing a security culture
Developing and sustaining an effective security culture is a vital part of an organisation’s personnel security
regime. Getting the culture right will ensure that employees are security-conscious and think about how to
protect the information and assets that they have access to at work.
Insights, shared information and best practice
Good security utilises insights and shared information, while also using best practice from first responders.
Balancing security and customer service
In addition to providing an excellent security service, security officers must be friendly, reassuring and well-
trained in communication skills.
Taking advantage of new ideas and new technologies
With threats constantly changing, organisations can benefit from new approaches. Adopting emerging
technologies, may improve security, while also making it more efficient, welcoming and reducing costs. .
Building integration in security
Finally, security that is integrated, or planned holistically, is likely to work better, because it has been designed
to ensure that there are no gaps to be exploited.
Physical security will work best when expertise, security professionals, technology and data analytics are
considered together. In the same way, physical security should not be considered in isolation, as it is
intertwined with personnel security and cyber security.
Noah Price is Head of the G4S Academy UK&I, which is responsible for sharing specialist threat and security
knowledge. It provides regular, free security bulletins on potential threats. For more information https://www.
g4s.com/en-gb/what-we-do/academy
37