At Bavaria, hospitality is firmly embedded within the company’s corporate culture and the company attaches considerable importance to the concepts of emotion and the experience. As a result of the growth that the company has undergone during the past few years, more stringent requirements are being imposed in connection with access control and security.

The system that the company has just acquired serves to reconcile the corporate culture with the requirements in terms of security. As a visitor drives up, the barrier at the entrance to the car park is raised without a hitch. Visitors can then report to the friendly receptionist. It is only at that point that they will be confronted with the first type of access control, when the receptionist asks them to register at the visitor registration post in the lobby.

Phased registration of visitors

Part of the registration procedure involves reading a number of safety and security rules. Once the user has read these, his/her visitor’s badge will be printed and the person with whom the visitor has an appointment will be informed.

Our vision with regard to access control is that a visitor should not be faced with a tall fence on arrival"

“Our vision with regard to access control is that a visitor should not be faced with a tall fence on arrival, but that the barrier should automatically be raised when he/she arrives. We do, of course, wish to know who is coming in and where on our site a particular person is located.” These words were spoken by Jos Senden, the Facility Manager at Bavaria, who is responsible for security.

From what he tell us about how security at Bavaria was organised until just a few years ago, it soon becomes clear that this vision was only implemented recently.

Improving security processes

“At the entrance, there were a few security cameras and a fairly unstructured system of recording visitors.” And yet at the time, the company was undergoing a period of rapid national and international growth, as a result of which the necessary expansions took place at the company’s headquarters in Lieshout in the province of North Brabant and the organisational requirements in terms of security changed.

As Jos Senden went on to explain: “But you could say that in those days, security policy did not keep pace with the growth of the organisation itself.” An example of this lay in the fact that at a particular moment, two access control systems were actually in use. What is more, Bavaria was increasingly being required to complete audits for major customers and those audits included questions regarding access control and security.

Determining a security policy

Improving the company’s security processes was therefore essential and there was an increasing feeling that a structured security policy should be put in place. In 2009, the fact that the company was operating two different access control systems became such a problem that a project group was created to address the issue.

We immediately embarked on a search for solutions, but we soon realised that what we needed was a security policy"

“In the beginning, we immediately embarked on a search for solutions, but we soon realised that what we needed was a security policy. After all, a policy is a foundation that you can build upon,” said John Aalders, the IT System and Network Controller, who was involved in the project right from the start. He went on to explain that: “We first drew up a list of the risks that we wished to protect ourselves against and once we had done that, we used that information in order to establish a system of zones across the entire site.”

Security policy plan

“The underlying principle behind this was that we did not wish to create something that resembled Fort Knox. Our aim was to project an image of openness and hospitality, while maintaining security at the same time.” As Jos Senden went on to add: “At Bavaria, being hospitable and open is part of our company culture. A brewery is all about emotion and the experience and this was something that needed to be reflected in our access control and security systems.”

In 2012, the security policy plan, based upon all of the risks that had been defined, together with the zoning system that had been introduced, was adopted. The project team, which included representatives of the Facility, IT and Engineering departments, the company’s own construction office, an external consultant and the company’s own installer, could then set out to identify a suitable solution.

New access control and security system

All of these things represented needs that we had and were what led us to choose AEOS by Nedap"

The Specifications listed a large number of requirements that the new access control and security system would be required to fulfil. However, Senden frankly admits that a number of requirements were only included as the project went along. “We can say that our insight developed progressively, especially with regard to the possibilities to create a security platform that is ready to meet the needs that arise in the future. What is needed is therefore a system that is scalable, user-friendly, can be linked to other management systems, is IP-based and so on."

"All of these things represented needs that we had and were what led us to choose AEOS by Nedap.” In the meantime, the new access control system has been up and running for 18 months and for Senden, the most important conclusion that can be drawn is that AEOS was the right choice for them.

Zero technical limitations

“The flexibility of the system in particular is ideal. Our company processes are easy to incorporate; the system supports this and as an organisation, we are not confronted with any technical limitations.”

John Aalders was able to give a great example of this. “Our initial requirement was for a new access control system, but along the way, we decided that we also needed camera monitoring and an intruder detection system. And recently, the question arose within the organisation as to whether the system could be linked to other building management systems. We have now progressed so far that we are now talking about a graphical interface, known as the Graphical Alarm Handler. All incident reports are received at a central location and can be dealt with by Security.”

In the enthusiastic account conveyed by Jos Senden and John Aalders, one particular word - flexibility - comes up again and again.

Easy to produce visitor’s badge

We haven’t started to record details of vehicles, but it will be a question of setting up the system whenever any such need arises"

When asked whether this was the primary factor behind the ultimate choice of the system, the answer was “Yes”. As Senden himself explained: “Not only does this system make it very easy to produce a visitor’s badge, but its ability to be expanded and the simplicity with which the system can be linked to other packages, formed important factors for us.”

Aalders went on to illustrate this by giving a practical example. “All manner of information is stored within a whole variety of systems. Imagine that I change my job title tomorrow, the new title will simply be entered into the personnel information system and will be processed automatically in our central employee database. This is linked to AEOS, and so the master data that relate to me are immediately amended to show my new position.”

Single open platform

“But we mustn’t lose sight of our needs in the future. At the moment, we haven’t started to record details of vehicles, but it will be a question of setting up the system whenever any such need arises,” explained Senden.

Each of these situations is an example that illustrates the fact that the system fulfils Bavaria’s initial requirement that as many tasks as possible can be carried out centrally, using a single open platform. In order to utilise the system in the most efficient possible way, managing it correctly will also be essential, continued Senden. “With that in mind, we set up a Management group that meets every two weeks in order to share experiences and discuss ongoing matters.” The Management group is made up of representatives of all of the interested departments.

Implementation of new access control system

This in itself underlines the fact that access control and security are a joint responsibility and that they are not simply the concern of the Facility and Security department. “As a result of this, issues can now be addressed in a structured manner and management is a continuous process, in which all interested parties are represented.”

We made sure that we communicated messages via our intranet and our staff magazine about the changes"

In a great many organisations, the implementation of a new access control system generates resistance. How was this perceived at Bavaria? As Senden himself explained: “If you switch from a system with 50 card-readers to a system with 140 and security measures are introduced at all doorways, you can certainly expect to encounter a certain amount of resistance. In order to address this, we made sure that during the run-up to the implementation, we communicated messages via our intranet and our staff magazine about the changes and explained why the systems were being introduced.

Enabled to engender support

During the planning stages of the project, however, we also involved department managers and asked them which areas they wished to be secured or which needed to remain accessible. Adopting this approach enabled us to engender support for the changes to come.”

“But the information was also well received by the employees themselves. Informing people effectively and in good time is therefore something that is highly important. That is why we didn’t experience very many problems,” concluded Aalders.

Share with LinkedIn Share with Twitter Share with Facebook Share with Facebook
Download PDF version

In case you missed it

What are the security challenges of protecting utilities?
What are the security challenges of protecting utilities?

Utilities are an important element of critical infrastructure and, as such, must be protected to ensure that the daily lives of millions of people continue without disruption. Protecting utilities presents a unique range of challenges, whether one considers the electrical grid or telecommunications networks, the local water supply or oil and gas lines. Security technologies contribute to protecting these diverse components, but it’s not an easy job. We asked this week’s Expert Panel Roundtable: What are the security challenges of protecting utilities?

Q&A: how the ‘secret service of Hollywood’ protects celebrities
Q&A: how the ‘secret service of Hollywood’ protects celebrities

At a major music festival, a fan in the crowd aggressively leapt over a barricade to approach a famous artist. Personnel from Force Protection Agency immediately implemented extrication protocol to shield the artist from physical harm, quickly reversed course and calmly led the client away from the threat. Force Protection Agency (FPA) personnel intentionally did not engage the threatening fan in any way, as local venue security personnel were present and tasked with apprehending the rogue fan. FPA’s efforts were directed expressly toward the protection of the client, avoiding unnecessary escalation or complications and minimising physical, visual, and legal exposure. Dedicated to the safety of clients Force Protection Agency is a unique, elite-level agency inspired by a vision for excellence and innovation Specialising in protecting celebrities and high-net-worth individuals, Force Protection Agency is a unique, elite-level agency inspired by a vision for excellence and innovation, and dedicated to the safety and success of clients. The agency was formed in 2017 by Russell Stuart, a California State Guard officer and security and entertainment industry veteran. The agency is the culmination of 20 years of experience in the fields of security, military, emergency management, logistics and technology, media and entertainment, and celebrity management. We interviewed Russell Stuart, Founder and CEO of Force Protection Agency (FPA), which has been called “the Secret Service of Hollywood,” for his insights into providing security for celebrities. Q: What unique need in the marketplace do you seek to serve, and how are you qualified to serve it? Stuart: The needs of celebrity and high-net-worth clients are complex and constantly changing. When dealing with a high-profile individual, discretion is paramount, extensive communication is required, and adaptation is ongoing. A critical objective is anticipating and planning for all types of potential negative scenarios and preventing them from even starting, all while not disrupting the normal course of operation of the client's day or their business. Force Protection Agency is poised to serve these needs by innovating and intelligently managing the planning, procedures, and personnel used in every facet of protecting the client’s interests and achieving their objectives. Q: What is the typical level of "professionalism" among bodyguards and security professionals that protect celebrities? Why does professionalism matter, and how do you differentiate yourself on this point? Stuart: Professionalism is an overall way of approaching everything to do with the business, from recruiting, to training, to making sure the right agent is with the right client. Nothing matters more; polish and precision are not only critical to mission success, but also support the comprehensive best interest of the client while preventing costly collateral damage and additional negative consequences. True “professional protective services" is intelligent strength and proper execution, not emotional or reactionary violence. Unfortunately, the latter is frequent among many celebrity bodyguards, and often incurs extremely expensive and even dangerous repercussions. Q: Your company has been described as "the Secret Service of Hollywood." How true is that comparison, and how does your work differ from (e.g.) protecting the President? Force Protection Agency prides itself on providing its services with discretion, precision, and poise Stuart: Totally true, and for this reason: the keys to success in protection are prioritization, and planning. Most people fail to even recognise the first, negating any level of effort given to the second. Establishing the true needs and the correct priority of objectives for each individual client and situation, and firmly committing to these without deviation, are what distinguishes both government secret services and Force Protection Agency from the vast majority of general security firms. Also, the term “secret service” implies an inconspicuous yet professional approach, and Force Protection Agency prides itself on providing its services with discretion, precision, and poise. Q: What is the biggest challenge of protecting celebrities? Stuart: The very nature of celebrity is visibility and access, which always increases risk. The challenge of protecting a high-profile individual is facilitating that accessibility in a strategic and controlled manner while mitigating risk factors. A client’s personal desires and preferences can often conflict with a lowest risk scenario, so careful consideration and thorough preparation are essential, along with continual communication. Q: How does the approach to protection change from one celebrity (client) to another? What variables impact how you do your job? Stuart: The approach is largely determined by the client’s specific needs, requests and objectives. The circumstances of a client's activities, location, and other associated entities can vastly disrupt operation activities. A client may prefer a more or less obvious security presence, which can impact the quantity and proximity of personnel. Force Protection Agency coordinates extensively with numerous federal, state, and municipal government agencies, which also have a variety of influence depending on the particular locations involved and the specific client activities being engaged in.  Q: Are all your clients celebrities or what other types of "executives" do you protect – and, if so, how are those jobs different? Stuart: Force Protection Agency provides protective services for a wide range of clients, from the world’s most notable superstars to corporate executives and government representatives. We also provide private investigation services for a vast variety of clientele. Force Protection Agency creates customised solutions that surpass each individual client’s needs and circumstances. The differences between protecting a major celebrity or top business executive can be quite different or exactly the same. Although potentially not as well known in popular culture, some top CEOs have a net worth well above many famous celebrities and their security needs must reflect their success. Q: What is the role of technology in protecting famous people (including drones)? Technology is crucial to the success of security operations Stuart: Technology is crucial to the success of security operations and brings a tremendous advantage to those equipped with the best technological resources and the skills required to maximise their capabilities. It affects equipment such as communication and surveillance devices like drones, cameras, radios, detection/tracking devices, GPS, defensive weapons, protective equipment, and more. Technology also brings immense capabilities to strategic planning and logistical operations through the power of data management and is another aspect of Force Protection Agency operation that sets us apart from the competition. Q: What additional technology tools would be helpful in your work (i.e., a “technology wish list”)? Stuart: The rapidly growing and evolving realm of social media is a massive digital battlefield littered with current and potential future threats and adversaries. Most mass shooters as of late have left a trail of disturbing posts and comments across social media platforms and chat rooms that telegraphed their disturbing mindset and future attacks. A tool that could manage an intelligent search for such threats and generate additional intel through a continuous scan of all available relevant data from social media sources would be extremely useful and could potentially save many lives. Q: Anything you wish to add? Stuart: Delivering consistent excellence in protection and security is both a vital need and a tremendous responsibility. Force Protection Agency is proud of their unwavering commitment to “Defend, Enforce, Assist” and stands ready to secure and satisfy each and every client, and to preserve the life and liberty of our nation and the world.

How custom solutions meet customer needs for access control
How custom solutions meet customer needs for access control

The software-based technology running today’s access control systems is ideal for creating custom solutions for very specific end-user needs. Those needs may vary from delaying bar patrons’ access to a shooting range to reducing the risk of diamond miners pocketing precious stones. The ability to tightly integrate with and control video, intrusion, and other equipment puts access control at the heart of enterprise security. Often, off-the-shelf access systems provide most of the features an end user requires, but due to their type of business, facility or location, some organisations still have unaddressed needs. That’s where a custom solution can fulfill an essential task. Custom solutions are frequently requested by end users or the reseller to expand access control to meet those needs. Here’s a look at some custom solutions designed for end users. Area & time-based access control The owners of a popular shooting range also operate an onsite, full-service bar, and the owners wanted to delay entry to the shooting range once a customer had consumed alcoholic beverages at the bar. The custom solution works with the access cards customers use to enter the range. When a patron orders an alcoholic beverage, the bartender presents the patron’s credential to a reader at the cash register.  With each drink, the access control system puts an automatic delay on the card being used to enter the shooting range. An area and time-based control solution was created An area and time-based control solution was created for a major pharmaceutical manufacturer concerned with potential contamination between laboratories testing viral material and others designing new vaccines. If an employee uses a badge to enter a room with viral material, that employee can be denied access to a different area (typically a clean room in this case), for a customised period of time. This reduces the potential of cross contamination between ‘dirty’ and ‘clean’ rooms. The software can be customised by room combinations and times. Random screening A mine operator wanted to prevent easily portable precious stones from being taken by miners. The custom solution uses the access control system integrated with time and attendance software. As the miners clock in, the system randomly and secretly flags a user-defined percentage of them to be searched as their shifts end. Security guards monitor displays and pull selected employees aside.  A nice feature of this solution is that the random screening can be overridden at a moment’s notice. For example, if the process causes excessive delays, guards can override the system to enable pre-selected miners to pass until the bottleneck is relieved. The solution has also been adopted by a computer manufacturer looking to control theft by employees and vendors. Scheduler The system automatically unlocks and locks doors A custom solutions team integrated a university’s class scheduling and access control software to lock doors to classrooms that are not in use. With the custom solution in place, the system automatically unlocks and locks doors 15 minutes prior to and after a class. The doors remain unlocked if the room will be used again within the next 30 minutes. Readers mounted at each door enable faculty to enter rooms early for class setup or to work in a lab knowing students or others won’t be able to walk in. Event management This solution simplifies the visitor check-in process, especially for larger events with multiple guests. Efficiently moving people in and out of events booked at a working intelligent office building and conference center required integrating the access control system with a web-based solution storing the names, email addresses, and phone numbers of invited guests. Before an event, guests receive an email invitation that includes a link to a downloadable smartphone mobile credential. Upon arrival, guests present that credential to Bluetooth readers at the building’s gated parking garage. The same credential enables smaller groups (up to 50 guests) to enter the building through turnstile-mounted readers – also used throughout the day by hundreds of building employees. To avoid long lines for larger groups of visitors, the turnstiles are kept open with security guards using handheld readers to authenticate credentials as guests enter the lobby. Additionally, a third-party emergency notification system was added to this custom solution. Guests receive instructions on their smartphones should there be a need to shelter in place or evacuate during an event. The credentials and notifications are disabled as guests leave the building through the turnstiles. This allows the hospital to maintain a secure environment while providing a simplified, efficient access solution Similar custom solutions have been deployed at hospitals searching for a way to provide secure access to patients only expected to be staying a short time for surgery.  Patients are emailed a mobile credential to access both the hospital’s parking structure and surgical reception area. They can also designate family members and other visitors to receive emailed mobile credentials.  This allows the hospital to maintain a secure environment while providing a simplified, efficient access solution for patients and visitors. Custom solutions are about problem solving. It’s finding answers to needs not specifically addressed by an access control system. The robust software of modern access control systems enables the design of custom solutions to efficiently enhance security, save time and reduce redundant tasks through automated processes.