CCTV software - Expert commentary

How to build an insider threat programme
How to build an insider threat programme

Insider threat programmes started with counter-espionage cases in the government. Today, insider threat programmes have become a more common practice in all industries, as companies understand the risks associated with not having one. To build a programme, you must first understand what an insider threat is. An insider threat is an employee, contractor, visitor or other insider who have been granted physical or logical access to a company that can cause extensive damage. Damage ranges from emotional or physical injury, to personnel, financial and reputational loss to data loss/manipulation or destruction of assets. Financial and confidential information While malicious insiders only make up 22% of the threats, they have the most impact on an organisation Most threats are derived from the accidental insider. For example, it’s the person who is working on a competitive sales pitch on an airplane and is plugging in financial and confidential information. They are working hard, yet their company’s information is exposed to everyone around them. Another type of insider, the compromised insider, is the person who accidentally downloaded malware when clicking on a fake, urgent email, exposing their information. Malicious insiders cause the greatest concerns. These are the rogue employees who may feel threatened. They may turn violent or take action to damage the company. Or you have the criminal actor employees who are truly malicious and have been hired or bribed by another company to gather intel. Their goal is to gather data and assets to cause damage for a specific purpose. While malicious insiders only make up 22% of the threats, they have the most impact on an organisation. They can cause brand and financial damage, along with physical and mental damage. Insider threat programme Once you determine you need an insider threat programme, you need to build a business case and support it with requirements. Depending on your industry, you can start with regulatory requirements such as HIPAA, NERC CIP, PCI, etc. Talk to your regulator and get their input. Everyone needs to be onboard, understand the intricacies of enacting a programme Next, get a top to bottom risk assessment to learn your organisation’s risks. A risk assessment will help you prioritise your risks and provide recommendations about what you need to include in your programme. Begin by meeting with senior leadership, including your CEO to discuss expectations. Creating an insider threat programme will change the company culture, and the CEO must understand the gravity of his/her decision before moving forward. Everyone needs to be onboard, understand the intricacies of enacting a programme and support it before its implemented. Determining the level of monitoring The size and complexity of your company will determine the type of programme needed. One size does not fit all. It will determine what technologies are required and how much personnel is needed to execute the programme. The company must determine what level of monitoring is needed to meet their goals. After the leadership team decides, form a steering committee that includes someone from legal, HR and IT. Other departments can join as necessary. This team sets up the structure, lays out the plan, determines the budget and what type of technologies are needed. For small companies, the best value is education. Educate your employees about the programme, build the culture and promote awareness. Teach employees about the behaviours you are looking for and how to report them. Behavioural analysis software Every company is different and you need to determine what will gain employee support The steering committee will need to decide what is out of scope. Every company is different and you need to determine what will gain employee support. The tools put in place cannot monitor employee productivity (web surfing). That is out of scope and will disrupt the company culture. What technology does your organisation need to detect insider threats? Organisations need software solutions that monitor, aggregate and analyse data to identify potential threats. Behavioural analysis software looks at patterns of behaviour and identifies anomalies. Use business intelligence/data analytics solutions to solve this challenge. This solution learns the normal behaviour of people and notifies security staff when behaviour changes. This is done by setting a set risk score. Once the score crosses a determined threshold, an alert is triggered. Case and incident management tools Predictive analytics technology reviews behaviours and identifies sensitive areas of companies (pharmacies, server rooms) or files (HR, finance, development). If it sees anomalous behaviour, it can predict behaviours. It can determine if someone is going to take data. It helps companies take steps to get ahead of bad behaviour. If an employee sends hostile emails, they are picked up and an alert is triggered User sentiment detection software can work in real time. If an employee sends hostile emails, they are picked up and an alert is triggered. The SOC and HR are notified and security dispatched. Depending on how a company has this process set-up, it could potentially save lives. Now that your organisation has all this data, how do you pull it together? Case and incident management tools can pool data points and create threat dashboards. Cyber detection system with access control An integrated security system is recommended to be successful. It will eliminate bubbles and share data to see real-time patterns. If HR, security and compliance departments are doing investigations, they can consolidate systems into the same tool to have better data aggregation. Companies can link their IT/cyber detection system with access control. Deploying a true, integrated, open system provides a better insider threat programme. Big companies should invest in trained counterintelligence investigators to operate the programme. They can help identify the sensitive areas, identify who the people are that have the most access to them, or are in a position to do the greatest amount of harm to the company and who to put mitigation plans around to protect them. They also run the investigations. Potential risky behaviour Using the right technology along with thorough processes will result in a successful programme You need to detect which individuals are interacting with information systems that pose the greatest potential risk. You need to rapidly and thoroughly understand the user’s potential risky behaviour and the context around it. Context is important. You need to decide what to investigate and make it clear to employees. Otherwise you will create a negative culture at your company. Develop a security-aware culture. Involve the crowd. Get an app so if someone sees something they can say something. IT should not run the insider threat programme. IT is the most privileged department in an organisation. If something goes wrong with an IT person, they have the most ability to do harm and cover their tracks. They need to be an important partner, but don’t let them have ownership and don’t let their administrators have access. Educating your employees and creating a positive culture around an insider threat programme takes time and patience. Using the right technology along with thorough processes will result in a successful programme. It’s okay to start small and build.

The benefits of an integrated security system
The benefits of an integrated security system

Today, the world is connected like never before. Your watch is connected to your phone, which is connected to your tablet and so on. As we’ve begun to embrace this ‘smart’ lifestyle, what we’re really embracing is the integration of systems. Why do we connect our devices? The simplest answer is that it makes life easier. But, if that’s the case, why stop at our own personal devices? Connection, when applied to a business’ operations, is no different: it lowers effort and expedites decision making. Integrating security systems Systems integration takes the idea of connected devices and applies it to an enterprise Systems integration takes the idea of connected devices and applies it to an enterprise, bringing disparate subcomponents into a single ecosystem. This could mean adding a new, overarching system to pull and collect data from existing subsystems, or adapting an existing system to serve as a data collection hub. Regardless of the method, the purpose is to create a single, unified view. Ultimately, it’s about simplifying processes, gaining actionable insights into operations and facilitating efficient decision-making. Although integration is becoming the new norm in other areas of life, businesses often opt out of integrating security systems because of misconceptions about the time and resources required to successfully make the change. So, instead of a streamlined operation, the various security systems and devices are siloed, not communicating with each other and typically being run by different teams within an organisation. Time-intensive process When systems are not integrated, companies face a wide range of risks driven by a lack of transparency and information sharing, including actual loss of property or assets. For example, a team in charge of access control is alerted to a door being opened in the middle of the night but can’t see what exactly is taking place through video surveillance. Without integrated systems they have no way of knowing if it was a burglar, an equipment malfunction or a gust of wind. Without integration between systems and teams, the ability to quickly put the right pieces in front of decision makers is missing. Instead, the team would have to go back and manually look for footage that corresponds with the time a door was open to figure out which door it was, who opened it and what happened after, which can be a time-intensive process. Integrating access control and surveillance systems Theft and vandalism occur quickly, meaning systems and users must work faster in order to prevent it This slowed response time adds risk to the system. Theft and vandalism occur quickly, meaning systems and users must work faster in order to prevent it. Security systems can do more than communicate that theft or vandalism occurred. Properly integrated, these systems alert users of pre-incident indicators before an event happens or deter events altogether. This gives teams and decision makers more time to make effective decisions. Integrating access control and surveillance systems allows for a more proactive approach. If a door is opened when it’s not supposed to be, an integrated system enables users to quickly see what door was opened, who opened it and make a quick decision. Integrated solutions are more effective, more efficient and help drive cost-saving decisions. Ideally, companies should establish integrated solutions from the start of operations. This allows companies to anticipate problems and adjust accordingly instead of reacting after an incident has occurred. Security camera system Although starting from the beginning is the best way to ensure comprehensive security, many companies have existing security systems, requiring integration and implementation to bring them together. Typically, companies with established security systems worry about the impact to infrastructure requirements. Is additional infrastructure necessary? How and where should it be added? What financial or human resources are required? These concerns drive a mentality that the benefits gained from an integrated solution aren’t worth the costs of implementation. Thankfully, this is becoming less of a problem as security providers, like Twenty20™ Solutions, work to offer adaptable solutions. With flexible options, operators don’t worry about adding or replacing infrastructure to align with a provider’s model. This allows users to monitor camera footage and gate traffic from one system If a company has an existing security camera system, but identifies a need for access control, a modern integrated solution provider can supply the gates for access points and equip the gates and cameras with the technology to connect the two. This allows users to monitor camera footage and gate traffic from one system. This model also spares operators additional costs by using a sole vendor for supplemental needs. Overall management of security While a single, unified system is beneficial for cost saving, it can also help the overall management of security. The ability to view all operating systems in one dashboard allows security personnel to manage a site from any location, reducing the expense and effort required to manage a system. The mobile world today means security directors no longer need to be in a centralised operations center to see alerts and make decisions. This simplifies processes by allowing users to quickly see an alert, pull up a camera, delete a user or check an access log from a phone. Modern networks are secure and accessible to those with permissions, without requiring those users to be physically present. Consolidating security systems is the first step companies can take toward streamlining work, information and costs. The next step is integrating all sites, both remote and on-grid. Energy and communication technology The integration of sites and systems turns mountains of data and information into actionable intelligence Traditional methods demanded two systems: one for on-grid facilities and another for off-grid locations. With advancements in energy and communication technology, the need for multiple systems is gone. Data from remote sites can be safely and securely fed into an existing system. These remote locations may gather, distribute and manage data in a different manner than a connected system due to the cost of transmission via remote connections (i.e., cellular or satellite connection). The end result, however, is a consistent and holistic view of operations for the decision maker. The integration of sites and systems turns mountains of data and information into actionable intelligence. With connected devices monitoring occurrences at individual sites, as well as events across locations, the data tells a story that is unhindered by operational silos or physical space. Identifying patterns and trends Instead of providing 10 hours-worth of footage that may or may not be relevant, system analytics can provide users with the specific set of information they need. Incidents once discarded as ‘one-off’ events can now be analysed and data-mapped to identify patterns and trends, directing future resources to the most critical areas first. Consumers are increasingly expecting everything they need to be right where they need it – and businesses are right behind them. The current generation of security professionals are increasingly expecting the simplicity of their everyday personal tasks to be mirrored in enterprise systems, which means giving them the ability to see what matters in one place. A unified system can provide just that, a single view to help simplify processes, promote cost saving and accelerate decision making.

How Artificial Intelligence and analytics enhance security and performance
How Artificial Intelligence and analytics enhance security and performance

Artificial intelligence (AI) is improving everyday solutions, driving efficiency in ways we never imagined possible. From self-driving cars to intelligent analytics, the far-reaching impacts of Deep Learning-based technology empower human operators to achieve results more effectively while investing fewer resources and less time. By introducing AI, solutions are not merely powered by data, but they also generate valuable intelligence. Systems which were once leveraged for a narrow, dedicated purpose, can suddenly be engaged broadly across an organisation, because the previously under-utilised data can be harnessed for enhancing productivity and performance. Video analytics software The video intelligence software processes and analyses video to detect all the people and objects that appear When it comes to physical security, for instance, video surveillance is a standard solution. Yet, by introducing AI-driven video analytics software, video data can be leveraged as intelligence in previously inaccessible ways. Here are some examples of how diverse organisations are using AI-based video intelligence solutions to enhance security and performance with searchable, actionable and quantifiable insights. Law enforcement relies on video surveillance infrastructure for extracting investigation evidence and monitoring people and spaces. Instead of manual video review and live surveillance – which is prone to human error and distraction – police can harness video content analysis to accelerate video investigations, enhance situational awareness, streamline real-time response, identify suspicious individuals and recognise patterns and anomalies in video. The video intelligence software processes and analyses video to detect all the people and objects that appear; identify, extract and classify them; and then index them as metadata that can be searched and referenced. Maintaining public safety For law enforcement, the ability to dynamically search video based on granular criteria is critical for filtering out irrelevant details and pinpointing objects of interest, such as suspicious persons or vehicles. Beyond accelerating video evidence review and extraction, police can leverage video analysis to configure sophisticated real-time alerts when people, vehicles or behaviours of interest are detected in video. Instead of actively monitoring video feeds, law enforcement can assess triggered alerts and decide how to respond. In this way, officers can also react faster to emergencies, threats and suspicious activity as it develops. Video analysis empowers cities to harness their video surveillance data as operational intelligence Empowering law enforcement to maintain public safety is important beyond the benefit of increasing security: A city with a reputation for effective, reliable law enforcement and enhanced safety is more likely to attract residents, visitors and new businesses, exponentially driving its economic development. Furthermore, in cities where law enforcement can work productively and quickly, time and human resources can be reallocated to fostering growth and building community. Video surveillance data Video analysis empowers cities to harness their video surveillance data as operational intelligence for optimising city management and infrastructure. When video data is aggregated over time, it can be visualised into dashboards, heatmaps and reports, so operators can identify patterns and more seamlessly detect anomalous behaviour. A city could, for instance, analyse the most accident-prone local intersection and assess the traffic patterns to reveal details such as where cars are dwelling and pedestrians are walking; the directional flows of traffic; and the demographic segmentations of the objects detected: Are cars lingering in no-parking zones? Are pedestrians using designated crosswalks – is there a more logical location for the crosswalk or traffic light? Do vehicles tend to make illegal turns – should police proactively deter this behaviour, or should the city plan new infrastructure that enables vehicles to safely perform these turns? Finally, does the rise in bike traffic warrant implementing dedicated biking lanes? With video intelligence, urban planners can answer these and other questions to facilitate local improvements and high quality of life. By leveraging the video insights about citywide traffic, public transit organisations can make data-driven decisions about scheduling and services Enhancing situational awareness Insight into traffic trends is also critical for transport companies, from public transit services to transportation hubs and airports. By leveraging the video insights about citywide traffic, public transit organisations can make data-driven decisions about scheduling and services. Analysing video surveillance around bus stops, for instance, can help these companies understand the specific hours per day people tend to dwell around bus stops. Correlating this information with transactional data for each bus line, bus schedules can be optimised based on demand for individual bus lines, shortening waiting times for the most popular routes. Similarly, the traffic visualisations and activity heatmaps derived from the video of major transit hubs, such as international airports and central stations, can be beneficial for increasing security, enhancing situational awareness, identifying causes of congestion, improving throughput and efficiency and, ultimately, solving these inefficiencies to provide a streamlined customer experience for travellers. Large education campuses Campus law enforcement can leverage video data to increase situational awareness and public safety Much like a city, large education campuses have internal transportation services, residential facilities, businesses and law enforcement, and video content analysis can support the campus in intelligently managing each of those business units, while also providing video intelligence to these individual groups. Campus law enforcement can leverage video data to increase situational awareness and public safety, driving real-time responses with the ability to make informed assessments and accelerating post-event investigations with access to easily extractable video data. When campuses are expanding or developing additional infrastructure, they can plan new crosswalks, traffic lights, roads, buildings and entrances and exits based on comprehensive video intelligence. By understanding where pedestrians and vehicles dwell, walk, cross or even violate traffic laws, the campus can inform construction projects and traffic optimisation. Countless business operations The campus can leverage video business intelligence to justify leasing pricing for different retailers across campus Finally, the campus can leverage video business intelligence to justify leasing pricing for different retailers across campus, demonstrating property values based on traffic trends that can be correlated with retailer point of sale data. Whether its empowering security, productivity or decision-making, the insights generated by AI-based technology can drive significant optimisation – especially when data is fused and cross-referenced across smart sensors and systems for even deeper intelligence. In the case of AI-backed video analytics, diverse organisations can harness video surveillance impactfully and dynamically. Whereas once video technology investments could be justified for their security value – with the introduction of AI capabilities – procurement teams can evaluate these solutions for countless business operations, because they offer broadly valuable intelligence. And video surveillance and analytics is merely one example of AI-driven solutions’ potential to disrupt business as we know it.

Latest ASL Safety and Security Ltd news

ASL Safety and Security to display new and existing products at Integrated Systems Europe 2017
ASL Safety and Security to display new and existing products at Integrated Systems Europe 2017

Both VIPEDIA-12 and INTEGRA support direct fibre network connectivity ASL Safety and Security will be exhibiting at Integrated Systems Europe 2017 (ISE 2017) at Amsterdam RAI exhibition centre, 7th-10th February, 2017, showcasing a host of brand new products including INTEGRA, an all-in-one public address/voice alarm system; VIPEDIA RACK, a rack-based EN54 solution; WMC01, a touch sensitive audio controller; and VIPEDIA CONTROL PROTOCOL (VCP), a new text-based control interface. ASL - Applications Solutions (Safety and Security) is a UK-based systems manufacturer of high-end public address, voice alarm, commercial audio and control system products internationally renowned across transport industries for reliable and complex long-line solutions. ASL’s new product ranges cater for a wide range of industries including transport, retail, stadia, nuclear, roads, tunnels, and oil & gas industries. Established in 1989 and operating from its UK headquarters in Lewes, East Sussex, ASL also operates from offices in Abu Dhabi and Hong Kong. A full complement of technical, sales, and marketing personnel from ASL is looking forward to welcoming visitors in Hall 7 (stand no.7-E225) for the duration of ISE 2017 to discuss latest product and market developments and to demonstrate new and existing products including the exciting VIPEDA product range.INTEGRA wall-mounted solution One of the more recent additions to the VIPEDIA product family, the INTEGRA wall-mounted solution forms a single-box, EN54 compliant public address and voice alarm system. Sleek and uncluttered, INTEGRA is designed with a modular approach and builds upon the proven technology of ASL’s D-series transformerless amplifiers and VIPEDIA DSP. INTEGRA greatly reduces the need for expensive design and build often required for rack-based voice alarm systems. WMC01 offers both IP and RS485 interfaces, allowing remote control of the local PA system without complicated wiring Both VIPEDIA-12 and INTEGRA now support direct fibre network connectivity, removing the need for third-party network switches—simplifying the delivery of EN54-16 certified voice alarm systems. Integral battery charging and supply ensures simple EN54 compliance. INTEGRA offers both impedance and DC loudspeaker circuit monitoring, and includes standby amplification to ensure the system will continue to operate even in the event of an amplifier failure. With each unit capable of delivering 2000W and catering for up to 10 zones, INTEGRA is suitable for both small and large systems alike. Highly flexible, multiple INTEGRA’s can be networked together over IP via integrated EN54 network switches to form larger, distributed systems, and can be easily installed into existing systems for retrofit solutions.Suitable applications include office blocks, retail stores, hospitals, university campuses and schools. WMC01 audio controller The WMC01 is an audio controller with a simple, intuitive design. Touch-sensitive buttons allow switching between various audio sources quickly and easily, whilst also offering volume level adjustment and muting of sound in the local zone.WMC01 offers both IP and RS485 interfaces, allowing remote control of the local PA system without complicated wiring. A local 3.5mm audio input allows users to connect an audio source directly. The WMC01 is available in black or gold finishes and can be flush-mounted.VIPEDIA rack VIPEDIA-12 technology combines over 20 years of voice alarm experience, and forms the heart of the ASL’s VIPEDIA rack-based EN54 solution. It takes care of every part of the system, from the monitoring of the loudspeakers and microphones, to the routing of messages to many zones simultaneously. The VIPEDIA-12 has been designed so that several units can be seamlessly linked together With on-board messages storage, powerful DSP based audio processing, Dante audio networking, and EN54 certification, VIPEDIA offers a unique combination of professional audio processing and voice alarm reliability. Lightweight yet powerful D-series amplifiers have been designed to be as environmentally friendly and as power-efficient as possible. Automatic sleep mode operates 24/7, where amps run on ultra-low power consumption during quiet periods and are only activated when they are needed.The V2000 mainframe houses up to 10 D-series transformerless amplifiers in just 2U of rack space, whilst integrated EN54-4 compliant battery chargers remove the need to house a separate charger, and provides enough current to charge the system to full capacity with ease. The VIPEDIA-12 has been designed so that several units can be seamlessly linked together over fibre to form a large distributed system. With multiple racks in various locations networked together, complete control can be maintained over huge distances. VIPEDIA Control Protocol (VCP) Vipedia Control Protocol (VCP) enables source selection and volume adjustment from any device capable of sending simple ASCII text over IP. Typical examples include touchscreen devices from VITY, Crestron, AMX. By communicating through a simple text-based language, integration is fast, simple, and easy to implement. With touchscreen control fast becoming the preferred way of managing systems, ASL’s public address, voice alarm and audio solutions can now easily integrate with and be controlled by such devices.

ASL ensures safety at London's City Thameslink train station through iVENCS 3D control system
ASL ensures safety at London's City Thameslink train station through iVENCS 3D control system

  iVENCS 3D control system at City Thameslink station will analyse voice, data and video as per the requirement ASL Safety & Security has delivered its iVENCS 3D control and supervisory platform at City Thameslink train station in London as part of the Thameslink programme. iVENCS is a sensor and event fusion environment in which voice, data and video can be filtered, analysed and directed from the full range of subsystems used at transport hubs. At City Thameslink, iVENCS is monitoring public address and voice alarm (PA/VA), CCTV, help points, alarm reporting and voice recorders.The PA/VA systems employ ASL's own Vipet IP audio controller, a hardware platform developed in conjunction with the VIPA software suite that provides a VoIP and digital voice announcement solution for railway stations and airports.iVENCS is aimed at mission-critical facilities that require life like representation of events within an integrated control environment across many disciplines and subsystems. Use of a distributed and open standards-based ‘publish and subscribe' model for messaging ensures efficient use of bandwidth compared with rival ‘hub and spoke' architecture control room software. The installation at City Thameslink is the first stage in a three-part infrastructure project that ASL is providing for the rail division of engineering design consultancy Atkins who in turn are working for Network Rail. The Thameslink programme will deliver longer, more frequent trains across London. The Thameslink route franchise has been operated by the train operating company (TOC) First Capital Connect since 2006. All three stations will have their own operational centres employing the iVENCS control solution In a second stage, ASL will supply its subsystem supervisory software and VoIP hardware at Blackfriars Station, a site that poses unique logistical challenges for all contractors since it lies on both sides of the River Thames. The final phase of the project will be Farringdon Station to the north of the city's financial quarter. All three stations will have their own operational centres employing the iVENCS control solution.ASL Safety & Security won the contract in open tender based on the functionality of iVENCS shown in successful deployment at a major international airport and at St. Pancras International Station - currently Europe's busiest rail hub - where the software controls over 8,500 field devices across 16 subsystems.Sousan Azimrayat, Founding Director of ASL, said: "All safety, security and communication systems at City Thameslink are being represented to First Capital Connect as meaningful images in real time. Our remit has included configuration, installation, creation of training material and consideration of the end-user's corporate culture and working practices. During temporary enabling works as the station neared completion, ASL even installed an interim public address system before the central monitoring process went live."She continued: "City Thameslink is unusual in that it is a mainline station whose platforms are underground, a feature that affected the design of many of the communication subsystems and the fully-interactive 3D GUI model created by ASL. In addition to equipment supply, ASL's software remit included an architectural design overview, operator interface design and preventative maintenance procedures."

ASL provides networked voice alarm system at Dungeness power station
ASL provides networked voice alarm system at Dungeness power station

   ASL provided a networked public address system for the Dungeness site A networked public address system from UK-based ASL Safety & Security has been installed at the Dungeness site, a former nuclear power station in the southeast of England now being decommissioned. The Dungeness project features customised microphones connected to the client's voice information consoles with toggle switching that triggers digital voice announcement (DVA) messages. The four-zone monitored PA system covers much of Dungeness A which is a legacy Magnox power station.  Areas where access to the public address system can be obtained by microphone include the central control room, emergency indication centre, emergency control room and reception. Following a successful first phase, ASL's rack-mounted Intellevac voice information network was installed to BS 5839-8:2008-compliant standards in the nuclear facility's accommodation block which has been created so that staff can be moved off site while a new building with improved IT facilities has been constructed. The power station is using ASL's digital microphone stations monitored by audio routers with full digital signal processing. The units are fully software-configurable and they feature built-in DVAs and fire system interfaces. The network interface adapter used here (VAR-NIA) is a rack mount unit that allows routers to be interfaced to ASL's Intellevac voice alarm network, all to BS 5839-8:2008. The audio control unit can be wall or rack-mount. The audio router in use at Dungeness (VAR12) is supplying the client, Magnox South, with full remote control, configuration and fault reporting through a serial interface. ASL offers a remote diagnostics product that can interrogate the status of remote routers through a web browser. Dungeness A stands on a 91-hectare shingle peninsula site on the Kent coast. Construction began in 1960 and the facility supplied electricity to the UK national grid for 40 years. Magnox South Ltd is working on behalf of the Nuclear Decommissioning Authority to manage the work safely, efficiently and with due care for the environment.

Related white papers

H.265 High Efficiency Coding: Video compression for security applications

Five things to consider for AI with video technology

Preparing your organisation with quality situational awareness