PAC Access Controllers

Insider threat programmes started with counter-espionage cases in the government. Today, insider threat programmes have become a more common practice in all industries, as companies understand the risks associated with not having one. To build a programme, you must first understand what an insider threat is. An insider threat is an employee, contractor, visitor or other insider who have been granted physical or logical access to a company that can cause extensive damage. Damage ranges from emotional or physical injury, to personnel, financial and reputational loss to data loss/manipulation or destruction of assets. Financial and confidential information While malicious insiders only make up 22% of the threats, they have the most impact on an organisation Most threats are derived from the accidental insider. For example, it’s the person who is working on a competitive sales pitch on an airplane and is plugging in financial and confidential information. They are working hard, yet their company’s information is exposed to everyone around them. Another type of insider, the compromised insider, is the person who accidentally downloaded malware when clicking on a fake, urgent email, exposing their information. Malicious insiders cause the greatest concerns. These are the rogue employees who may feel threatened. They may turn violent or take action to damage the company. Or you have the criminal actor employees who are truly malicious and have been hired or bribed by another company to gather intel. Their goal is to gather data and assets to cause damage for a specific purpose. While malicious insiders only make up 22% of the threats, they have the most impact on an organisation. They can cause brand and financial damage, along with physical and mental damage. Insider threat programme Once you determine you need an insider threat programme, you need to build a business case and support it with requirements. Depending on your industry, you can start with regulatory requirements such as HIPAA, NERC CIP, PCI, etc. Talk to your regulator and get their input. Everyone needs to be onboard, understand the intricacies of enacting a programme Next, get a top to bottom risk assessment to learn your organisation’s risks. A risk assessment will help you prioritise your risks and provide recommendations about what you need to include in your programme. Begin by meeting with senior leadership, including your CEO to discuss expectations. Creating an insider threat programme will change the company culture, and the CEO must understand the gravity of his/her decision before moving forward. Everyone needs to be onboard, understand the intricacies of enacting a programme and support it before its implemented. Determining the level of monitoring The size and complexity of your company will determine the type of programme needed. One size does not fit all. It will determine what technologies are required and how much personnel is needed to execute the programme. The company must determine what level of monitoring is needed to meet their goals. After the leadership team decides, form a steering committee that includes someone from legal, HR and IT. Other departments can join as necessary. This team sets up the structure, lays out the plan, determines the budget and what type of technologies are needed. For small companies, the best value is education. Educate your employees about the programme, build the culture and promote awareness. Teach employees about the behaviours you are looking for and how to report them. Behavioural analysis software Every company is different and you need to determine what will gain employee support The steering committee will need to decide what is out of scope. Every company is different and you need to determine what will gain employee support. The tools put in place cannot monitor employee productivity (web surfing). That is out of scope and will disrupt the company culture. What technology does your organisation need to detect insider threats? Organisations need software solutions that monitor, aggregate and analyse data to identify potential threats. Behavioural analysis software looks at patterns of behaviour and identifies anomalies. Use business intelligence/data analytics solutions to solve this challenge. This solution learns the normal behaviour of people and notifies security staff when behaviour changes. This is done by setting a set risk score. Once the score crosses a determined threshold, an alert is triggered. Case and incident management tools Predictive analytics technology reviews behaviours and identifies sensitive areas of companies (pharmacies, server rooms) or files (HR, finance, development). If it sees anomalous behaviour, it can predict behaviours. It can determine if someone is going to take data. It helps companies take steps to get ahead of bad behaviour. If an employee sends hostile emails, they are picked up and an alert is triggered User sentiment detection software can work in real time. If an employee sends hostile emails, they are picked up and an alert is triggered. The SOC and HR are notified and security dispatched. Depending on how a company has this process set-up, it could potentially save lives. Now that your organisation has all this data, how do you pull it together? Case and incident management tools can pool data points and create threat dashboards. Cyber detection system with access control An integrated security system is recommended to be successful. It will eliminate bubbles and share data to see real-time patterns. If HR, security and compliance departments are doing investigations, they can consolidate systems into the same tool to have better data aggregation. Companies can link their IT/cyber detection system with access control. Deploying a true, integrated, open system provides a better insider threat programme. Big companies should invest in trained counterintelligence investigators to operate the programme. They can help identify the sensitive areas, identify who the people are that have the most access to them, or are in a position to do the greatest amount of harm to the company and who to put mitigation plans around to protect them. They also run the investigations. Potential risky behaviour Using the right technology along with thorough processes will result in a successful programme You need to detect which individuals are interacting with information systems that pose the greatest potential risk. You need to rapidly and thoroughly understand the user’s potential risky behaviour and the context around it. Context is important. You need to decide what to investigate and make it clear to employees. Otherwise you will create a negative culture at your company. Develop a security-aware culture. Involve the crowd. Get an app so if someone sees something they can say something. IT should not run the insider threat programme. IT is the most privileged department in an organisation. If something goes wrong with an IT person, they have the most ability to do harm and cover their tracks. They need to be an important partner, but don’t let them have ownership and don’t let their administrators have access. Educating your employees and creating a positive culture around an insider threat programme takes time and patience. Using the right technology along with thorough processes will result in a successful programme. It’s okay to start small and build.

Today, the world is connected like never before. Your watch is connected to your phone, which is connected to your tablet and so on. As we’ve begun to embrace this ‘smart’ lifestyle, what we’re really embracing is the integration of systems. Why do we connect our devices? The simplest answer is that it makes life easier. But, if that’s the case, why stop at our own personal devices? Connection, when applied to a business’ operations, is no different: it lowers effort and expedites decision making. Integrating security systems Systems integration takes the idea of connected devices and applies it to an enterprise Systems integration takes the idea of connected devices and applies it to an enterprise, bringing disparate subcomponents into a single ecosystem. This could mean adding a new, overarching system to pull and collect data from existing subsystems, or adapting an existing system to serve as a data collection hub. Regardless of the method, the purpose is to create a single, unified view. Ultimately, it’s about simplifying processes, gaining actionable insights into operations and facilitating efficient decision-making. Although integration is becoming the new norm in other areas of life, businesses often opt out of integrating security systems because of misconceptions about the time and resources required to successfully make the change. So, instead of a streamlined operation, the various security systems and devices are siloed, not communicating with each other and typically being run by different teams within an organisation. Time-intensive process When systems are not integrated, companies face a wide range of risks driven by a lack of transparency and information sharing, including actual loss of property or assets. For example, a team in charge of access control is alerted to a door being opened in the middle of the night but can’t see what exactly is taking place through video surveillance. Without integrated systems they have no way of knowing if it was a burglar, an equipment malfunction or a gust of wind. Without integration between systems and teams, the ability to quickly put the right pieces in front of decision makers is missing. Instead, the team would have to go back and manually look for footage that corresponds with the time a door was open to figure out which door it was, who opened it and what happened after, which can be a time-intensive process. Integrating access control and surveillance systems Theft and vandalism occur quickly, meaning systems and users must work faster in order to prevent it This slowed response time adds risk to the system. Theft and vandalism occur quickly, meaning systems and users must work faster in order to prevent it. Security systems can do more than communicate that theft or vandalism occurred. Properly integrated, these systems alert users of pre-incident indicators before an event happens or deter events altogether. This gives teams and decision makers more time to make effective decisions. Integrating access control and surveillance systems allows for a more proactive approach. If a door is opened when it’s not supposed to be, an integrated system enables users to quickly see what door was opened, who opened it and make a quick decision. Integrated solutions are more effective, more efficient and help drive cost-saving decisions. Ideally, companies should establish integrated solutions from the start of operations. This allows companies to anticipate problems and adjust accordingly instead of reacting after an incident has occurred. Security camera system Although starting from the beginning is the best way to ensure comprehensive security, many companies have existing security systems, requiring integration and implementation to bring them together. Typically, companies with established security systems worry about the impact to infrastructure requirements. Is additional infrastructure necessary? How and where should it be added? What financial or human resources are required? These concerns drive a mentality that the benefits gained from an integrated solution aren’t worth the costs of implementation. Thankfully, this is becoming less of a problem as security providers, like Twenty20™ Solutions, work to offer adaptable solutions. With flexible options, operators don’t worry about adding or replacing infrastructure to align with a provider’s model. This allows users to monitor camera footage and gate traffic from one system If a company has an existing security camera system, but identifies a need for access control, a modern integrated solution provider can supply the gates for access points and equip the gates and cameras with the technology to connect the two. This allows users to monitor camera footage and gate traffic from one system. This model also spares operators additional costs by using a sole vendor for supplemental needs. Overall management of security While a single, unified system is beneficial for cost saving, it can also help the overall management of security. The ability to view all operating systems in one dashboard allows security personnel to manage a site from any location, reducing the expense and effort required to manage a system. The mobile world today means security directors no longer need to be in a centralised operations center to see alerts and make decisions. This simplifies processes by allowing users to quickly see an alert, pull up a camera, delete a user or check an access log from a phone. Modern networks are secure and accessible to those with permissions, without requiring those users to be physically present. Consolidating security systems is the first step companies can take toward streamlining work, information and costs. The next step is integrating all sites, both remote and on-grid. Energy and communication technology The integration of sites and systems turns mountains of data and information into actionable intelligence Traditional methods demanded two systems: one for on-grid facilities and another for off-grid locations. With advancements in energy and communication technology, the need for multiple systems is gone. Data from remote sites can be safely and securely fed into an existing system. These remote locations may gather, distribute and manage data in a different manner than a connected system due to the cost of transmission via remote connections (i.e., cellular or satellite connection). The end result, however, is a consistent and holistic view of operations for the decision maker. The integration of sites and systems turns mountains of data and information into actionable intelligence. With connected devices monitoring occurrences at individual sites, as well as events across locations, the data tells a story that is unhindered by operational silos or physical space. Identifying patterns and trends Instead of providing 10 hours-worth of footage that may or may not be relevant, system analytics can provide users with the specific set of information they need. Incidents once discarded as ‘one-off’ events can now be analysed and data-mapped to identify patterns and trends, directing future resources to the most critical areas first. Consumers are increasingly expecting everything they need to be right where they need it – and businesses are right behind them. The current generation of security professionals are increasingly expecting the simplicity of their everyday personal tasks to be mirrored in enterprise systems, which means giving them the ability to see what matters in one place. A unified system can provide just that, a single view to help simplify processes, promote cost saving and accelerate decision making.

The statistics are staggering. The death tolls are rising. And those who now fear environments that were once thought to be safe zones like school campuses, factories, commercial businesses and government facilities, find themselves having to add the routine of active-shooter drills into their traditional fire drill protocols. The latest active shooter statistics released by the FBI earlier this year in their annual active-shooter report designated 27 events as active shooter incidents in 2018. The report reveals that 16 of the 27 incidents occurred in areas of commerce, seven incidents occurred in business environments, and five incidents occurred in education environments. Deadly active-shooter events Six of the 12 deadliest shootings in the country have taken place in the past five years Six of the 12 deadliest shootings in the country have taken place in the past five years, including Sutherland Springs church, Marjory Stoneman Douglas High School, the San Bernardino regional center, the Walmart in El Paso and the Tree of Life Synagogue in Pittsburgh, which have all occurred since 2015. Although these incidents occurred in facilities with designated entry points common to churches, schools and businesses, the two most deadly active-shooter events since 2015 were the Route 91 Harvest music festival shooting in Las Vegas that left 58 dead and the Pulse nightclub killings in Orlando where 49 perished. As Christopher Combs, special agent in charge of the FBI field office in San Antonio, Texas, said during a news conference following the August 31 mass shooting in Odessa, Texas that claimed seven lives: “We are now at almost every two weeks seeing an active shooter in this country." Active shooter incidents Between December 2000 and December 2018, the FBI’s distribution of active shooter incidents by location looks like this: Businesses Open to Pedestrian Traffic (74) Businesses Closed to Pedestrian Traffic (43) K-12 Schools (39) Institutions of Higher Learning (16) Non-Military Government Properties (28) Military Properties—Restricted (5) Healthcare Facilities (11) Houses of Worship (10) Private Properties (12) Malls (6) What the majority of these venues have in common is they all have a front entrance or chokepoint for anyone entering the facilities, which is why any active-shooter plan must include a strategy to secure that entry point. Situational awareness in perimeter and door security Preventing people with the wrong intentions from entering the space is the goal" According to Paul Franco, an A&E with more than 28 years of experience as a consultant and systems integrator focusing on schools, healthcare and large public and private facilities, that while active shooter incidents continue to rise, the residual effect has been an increase in situational awareness in perimeter and door security. “Certainly, protecting people and assets is the number one goal of all our clients. There are multiple considerations in facilities like K-12 and Healthcare. Preventing people with the wrong intentions from entering the space is the goal. But a critical consideration to emphasise to your client is getting that person out of your facility and not creating a more dangerous situation by locking the person in your facility,” says Franco. High-security turnstiles “Schools today are creating a space for vetting visitors prior to allowing access into the main facility. Using technology properly like high-security turnstiles offer great benefits in existing schools where space constraints and renovation costs can be impractical.” What steps should they be taken when recommending the proper door security to ensure the building is safe As a consultant/integrator, when discussions are had with a client that has a facility in a public space like a corporate building, government centre or industrial facility, what steps should they be taken when recommending the proper door security to ensure the building is safe and can protect its people and assets? For Frank Pisciotta, President and CEO of Business Protection Specialists, Inc. in Raleigh, North Carolina, a fundamental element of his security strategy is making appropriate recommendations that are broad-based and proactive. Properly identifying the adversaries “As a consultant, my recommendations must include properly identifying the adversaries who may show up at a client’s door, the likelihood of that event occurring, the consequences of that event occurring, determining if there are tripwires that can be set so an organisation can move their line of defence away from the door, educating employees to report potential threats and creating real-time actionable plans to respond to threats. A more reactionary posture might include such thing as target hardening such as ballistic resistant materials at entry access points to a facility,” Pisciotta says. Veteran consultant David Aggleton of Aggleton & Associates of Mission Viejo, California recommends that clients compartmentalise their higher security areas for limited access by adding multiple credential controls (card + keypad + biometric), along with ‘positive’ access systems that inhibit tailgating/piggybacking such as secure turnstiles, revolving door and mantrap if your entrances and security needs meet the required space and access throughput rates. Integrated solution of electronic access control Defining a single point of entry in some public facilities is becoming the new standard of care according to many A&Es and security consultants, especially in a school environment. This approach allows a concerted effort when it comes to staffing, visitor monitoring and an integrated technology solution. The bottom line remains: most buildings are vulnerable to a security breach A proactive stance to securing a door entryway will use an integrated solution of electronic access control, turnstiles, revolving doors and mantraps that can substantially improve a facility’s security profile. The bottom line remains: most buildings are vulnerable to a security breach, so it’s not a matter of if there will be a next active shooter tragedy, it’s only a matter of where. Enhancing access control assurance “There is no easy answer to this question,” says Pisciotta referring to how a secured entrance can deter an active shooter. “There have been at least two high-profile incidents of adversaries shooting their way into a facility through access control barriers. So, if the threat so dictates, a ballistic resistant might be required.” He concludes: “There is obviously no question that turnstiles, revolving doors and man traps enhance access control assurance. Electronic access control is easy to integrate with these devices and providing that credentials are secure, approval processes are in place, change management is properly managed and the appropriate auditing measures in place, access control objectives can be met.”

3xLOGIC, PAC/GDX and PACOM, providers of security and access control solutions, have announced they will be exhibiting on stand IF2930 at IFSEC International 2019, which takes place on 18th-20th June at ExCeL, London. For over 15 years as one of the USA’s most respected innovators in server, cloud and artificial intelligence-based solutions, 3xLOGIC has an enviable track record in redefining what’s possible with security technology. After successfully launching into the European market earlier this year, 3xLOGIC will exhibit its diverse range of cutting-edge products as well as demonstrate their integration capabilities. Leading the way is the integration of 3xLOGIC’s NVRs and standalone cameras into PACOM’s GMS and Unison product lines. VIGIL enterprise grade VMS 3xLOGIC’s VIGIL enterprise grade VMS is the driving force behind the VIGIL range of NVRs, DVRs and PoE cameras3xLOGIC’s VIGIL enterprise grade VMS is the driving force behind the VIGIL range of network video recorders (NVRs), digital video recorders (DVRs) and Power over Ethernet (PoE) cameras. To further enhance VIGIL’s suitability for multi-site environments, it has been integrated with the PACOM Graphical Management System (GMS). Engineered to communicate over an IP network, the PACOM GMS allows for full integration of access control, alarm monitoring, video surveillance and many other security functions. 3xLOGIC’s Visix Facial Recognition camera is making its European debut at IFSEC 2019. This special purpose, low cost, dual lens 2MP device is designed for instant face detection, and the identification and notification of persons of interest. Using camera-based analytics and 3xLOGIC’s exclusive facial recognition software and mobile app, users can review images and choose which individuals to place on a watch list. Unison security management Furthermore, 3xLOGIC’s Facial Recognition camera has recently been integrated into PACOM’s Unison security management platform. An open security solution designed specifically for campus-based organisations, Unison is the solution of choice for organisations within vertical sectors such as healthcare, universities, commercial buildings, public facilities, municipalities, airports, shipping ports and data centres. The combination of Facial Recognition capabilities with Unison improves operational efficiency by quickly and accurately identifying persons of interest, and streamlining processes to use this information to meet the organisation’s security and marketing goals. TRENDS empowers the user to interpret vast amounts of disparate data more effectively and efficiently than ever before For those looking to optimise organisational efficiency, 3xLOGIC’s TRENDS cloud-based business intelligence tool incorporates exception-based reporting, video data and third-party applications into an easy to use dashboard that provides a simple visual snapshot of business operations. TRENDS empowers the user to interpret vast amounts of disparate data more effectively and efficiently than ever before, offering unrivalled levels of visibility to quickly spot issues and liabilities that can seriously impact a company’s bottom line. Bluetooth-based card reader Last, but certainly not least, visitors will have the chance to get hands on with the new PAC GDX Bluetooth-based card reader technology, which has been specifically designed to meet the requirements of companies of all sizes that want the most secure access control solution possible. Experts from the company will be available for product demonstrations and to discuss a new online training programme that has been developed to enable installers and end users to get the very best out of their PAC GDX solution. “It has been a tremendously exciting year, and we are looking forward to discussing our activities with those attending IFSEC,” commented Matt Kushner, Global President, Stanley Products and Solutions. “With a combined legacy 
of over 100 years in the security industry, 3xLOGIC, PAC GDX and PACOM lead the way in the design and manufacture of video surveillance, access control, and business intelligence solutions. By visiting Stand IF2930 and talking to our experts, visitors have a fantastic opportunity to find out how our technology can enhance security provision in a diverse range of built environments and how we can help them achieve their operational and security objectives.”

3xLOGIC, Inc., global provider of integrated, intelligent security solutions, and a three-time Deloitte Technology Fast 500 winner, announced that the company has added to its growing North American sales network, along with other personnel moves at its umbrella company, Stanley Products and Solutions (SPS). The company added two new RSMs to further penetrate key markets in the Pacific NW as well as the Mid-Atlantic regions and appointed a new Marketing Manager for the PACOM brand of products. 3xLOGIC adds security expert  3xLOGIC welcomes Joel Dombovy as a Regional Sales Manager (RSM) in the Northwest 3xLOGIC welcomes Joel Dombovy as a Regional Sales Manager (RSM) in the Northwest. Joel comes to the company with 14 years of security industry experience, working with companies such as Interlogix, GE Security, and Honeywell. John Saxen will support Joel as the Inside Sales Account Manager for the region. Jake Franklin takes over as RSM for the Mid-Atlantic. He joins the company from RF Technologies, a safety solutions company in healthcare where he was RSM for the Northeast. Prior to that, he worked as Critical Infrastructure Account Manager & Sales Representative at a security integration company. Jake’s passion for technology and previous security experience make him an excellent addition to 3xLOGIC’s powerful sales team. Bill Hobbs, Global VP of Sales for SPS, announced that both Joel and Jake will report to Jason Bryan, Director of Sales. PACOM expands marketing team Jennifer Joyce is the new Marketing Manager for PACOM, sister company of 3xLOGIC, as the company continues to expand efforts in the North American to market the wide range of PACOM solutions that have found success all over the world. She brings more than 25 years of marketing and design experience to the team. Her global marketing experience began with Firestone Industrial Products and Jennifer most recently spent her time in digital marketing as Marketing Director for Orbis Education. She will report to Suzi Abell, Senior Director of Global Marketing, SPS. Gavin O’Keeffe has been promoted to Director of Product Management Elsewhere in the larger SPS organisation Charlie Erickson has a new title reflecting his growing responsibilities—Chief Technology Officer. He continues to oversee Product Management as his team continues to expand. Reporting directly to Charlie, Michael Poe has been promoted to Director of Product Management. He will be leading the Video, Blue, DIY, and TRENDS products lines. Rick Walker will be aligned under Poe’s leadership.  New PAC, PACOM, infinias head Also reporting to Charlie, Gavin O’Keeffe has been promoted to Director of Product Management, and he will be leading the PAC, PACOM, infinias, and Sonitrol product teams. We also welcome Darren Monroe, Product Manager for infinias to Gavin’s team. Darren will work in the 3xLOGIC office in Indianapolis and Gavin works out of the PACOM Australia office. Drew Alexander continues as Sr. Director of Program Management, and he will continue to add Program Managers to his team to facilitate a growing list of product launches and business initiatives.

3xLOGIC, the provider of integrated and intelligent security solutions, has announced the availability of its pioneering VIGIL video management system (VMS) in Europe. Already enormously popular in the USA, 3xLOGIC aims to replicate this success and is targeting VIGIL at those who want all the power of integrated video and access control, without the stress and cost of a complex set-up. VIGIL’s enterprise grade VMS is the driving force behind the VIGIL range of network video recorders (NVRs) and power over Ethernet (PoE) cameras. Its easy set-up wizard guides installers and end users through the configuration process, helping to define network parameters, system identification information and camera profiles quickly and efficiently. VIGIL Central Management software With 3xLOGIC’s VCM, it is possible to monitor server connectivity, camera status, storage details and server settingsEvents can be viewed via PC or mobile app, allowing users to respond to alarms and view live footage from any location, while SmartSearch functionality enables individuals to quickly identify and review events. With 3xLOGIC’s VIGIL Central Management software (VCM), it is also possible to monitor server connectivity, camera status, storage details and server settings; and 3xLOGIC’s RapidStream technology and SubStream motion detection functionality offers high resolution while substantially reducing bandwidth demands All VIGIL NVRs come pre-configured with VIGIL VMS software and 3xLOGIC PoE-enabled internet protocol (IP) dome, bullet, cube, 360°, thermal imaging, and pan tilt zoom (PTZ) cameras are designed to suit any application. The easy set-up wizard also provides plug and play capability for easy deployment, so no IP video experience is necessary to start recording or viewing video. Integrated with infinias access control solution Advanced reporting features including heat mapping, restricting and locking video are also possibleUsers can easily narrow down points of interest within larger playback clips by creating a SmartSearch mask over an area of an image, and surveillance data can also be routinely archived without the need to perform the task manually. Advanced reporting features including heat mapping, restricting and locking video are also possible. End users are increasingly demanding integrated VMS and access control. VIGIL can be seamlessly integrated with 3xLOGIC’s cutting edge infinias access control solution, which is designed to easily manage any size of project ranging from a single door to an enterprise-wide installation of hundreds of doors. With no wires from VIGIL to infinias, configuration is carried out through software with an automated, cloud-based programming tool. This offers a cost-effective way to create one intuitive solution where video is automatically linked with access control events and alarms. New revenue stream for installers VIGIL opens up a new revenue stream for installers that work primarily with small to medium-sized enterprises Offering a level of functionality previously only available in solutions designed for larger projects, VIGIL removes the need for expensive technical labour. It therefore opens up a new revenue stream for installers that work primarily with small to medium-sized enterprises (SMEs), or who wish to start offering an integration based service. VIGIL is available through the existing PAC channel, with full access to its technical support, meaning that customers can rely on a tried and trusted supply chain that delivers products on time, every time. “The response to 3xLOGIC’s presence in Europe has been phenomenal,” commented David Hughes, the company’s global product manager. “The availability of VIGIL is the next step in our strategy to redefine the way in which security systems are designed, specified and configured across the continent. “Suitable for almost any budget, VIGIL is designed to be fully integrated to provide SMEs with comprehensive, cost effective and state-of-the-art video and access control infrastructures that are easy to manage, simple to install and can scale in line with changing needs.”