Spotlight on Residential Security
The tragic murders of the Savopoulos family and their housekeeper in Washington, D.C. unfortunately show us how high net worth people are at risk to be targets of potentially violent crime. As of today, two persons of interest have been identified—one is a former employee and the other suspect a current one. As the facts continue to surface, we won’t be surprised to learn that this was premeditated, coordinated, rehearsed, and conspired by at least two individuals and possibly others. The main suspect has an arrest record that includes harassment, concealed weapons, theft, and violating an order of protection. The other suspect has bounced around from job to job, was fired by his previous employer, and had been recently hired to do odd jobs for the family. The checkered pasts of these two individuals fit the characteristics of what we see in many insider threat cases. An arrest record, unstable work history, job terminations, and access to weapons are some common denominators. And where these two subjects previously crossed paths provides pieces to a puzzle that has ultimately landed them as suspects in the torture and deaths of innocent people.
Executives Benefit from a Residential Security Assessment
After conducting countless residential security assessments for senior-level executives of major corporations, I have found the number one concern of these individuals is the personal safety of their families. In order to deliver the highest value possible to each engagement, I uniquely tailor the project to best serve my client by beginning with a framework for the assessment that is extremely flexible and adaptable to the environment. The structure then follows a developed and still evolving outline that leverages more than 30 years in the law enforcement and security fields and is based on four main pillars: 1) physical security, 2) technical security, 3) network security, and 4) procedural security. These assessments include an on-site security survey of the residence including the building, property, and its outer perimeter; the risks, threats, and vulnerabilities potentially impacting the safety and security of the home along with the occupants and guests; countermeasures and strategies for risk transfer, avoidance, mitigation, or acceptance; and detailed risk mitigation considerations.
A Prime Example of Insider Threat
In 2008, the Secret Service National Threat Assessment Center (NTAC) and the CERT® Program (CERT) of Carnegie Mellon University’s Software Engineering Institute collaborated on the Insider Threat Study (ITS) in the cyber security realm. The study focused on employees who committed illegal or unauthorized acts against organizations using a computer, system, or network, such as theft of intellectual property, fraud, and acts of sabotage within critical infrastructure sectors. This research found that current and former employees carried out insider activities in nearly equal numbers, many of these individuals had prior arrests, and a specific work-related event triggered the actions of most insiders—all of which are eerily applicable to what has been uncovered in the Savopoulos case.
How You Can Protect Your Home and Family
So what can we learn from this incident to help prevent future tragedies? First, whether you’re the founder of a multi-million dollar company or a private homeowner, you need to know the people you come into contact with every day and, more importantly, have access to your home. Your list might include landscapers, cleaning ladies, nannies, dog walkers, and contractors, to name a few. Before any of these people set foot on your property, you have to ensure their backgrounds have been properly screened by their employer. If they are sole proprietors, they must provide proof of passing a background check and establishing legal residency, if applicable. These checks should not be more than three years old and should include, at a minimum, criminal history, civil litigation, and drug testing.
A professional and comprehensive residential security assessment will evaluate the technical, physical, and cyber security measures of your home. When you follow the recommendations of the key takeaways, you will not only help safeguard your home and family from a preventative standpoint, but you will also have a planned response and recovery to any type of nefarious event occurring on your private property. Corporate leaders need to be aware that danger is not only found in the workplace or while travelling abroad; it can also occur in their own backyard.
Building the Perfect (Security) Beast
We turn to a consultant to help us with a challenge we can’t solve ourselves, to supply the knowledge and experience of industry best practices and regulatory compliance, provide a particular type of subject matter expertise, or to guide us through a specific project. While a security consultant is certainly an advisor, assessor, examiner, and evaluator, we can also ask him or her to modify, correct, enhance, and create safety- and security-related documents—specifically, procedural standards such as guidelines, policies, plans, rules, and directives.
Imitation Is the Highest Form of Flattery
If you could create a security department that was an industry leader with best-in-class operations, would you? Of course you would, but how do you know your program is better than the rest? What puts you ahead of your competitors and, equally important, keeps you there? Your success starts with the documents that reflect the mission of the security program while at the same time protect the brand of the organization. Ideally you want to benchmark against companies similar in shape, size, and footprint. If you work for a multinational corporation operating in multiple continents with a global corporate security department, then you want to compare yourself to similar organizations and their full breadth of the security department policies.
All For One and One For All
Employees are more likely to see security as a company priority if management visibly supports security efforts and initiatives. Consequently, a security program is most effective when people see it as an important part of a company’s goals and vision. Among the best ways to demonstrate that support is to include security as one of management’s core values and to promulgate official company policies regarding security. And as the most effective means to this end, multi-disciplinary involvement in the creation and vetting of these documents invites partnerships with legal, HR, IT, and employee assistance to collaboratively design inclusive and relevant procedures. A security department simply cannot do all this by itself.
Let’s Talk About the Nuts and Bolts
Now that we’ve addressed the importance of building a security program through the “power of paper,” let’s focus on the specific documents needed. Applicable security directives and guidelines can include documents such as:
- A clean desk policy
- Access control procedures
- Restricted area access
- Visitor management
- Background screening requirements
While physical security measures are critical, the access protocols and practices and the ability to screen and filter all personnel, services, deliveries, and equipment seeking access to the facilities and its environs are equally, if not more, important. The implementation and effectiveness of security systems, such as closed-circuit surveillance equipment, exterior and perimeter security systems and monitoring, and electronic access control systems, can be determined by the written guidelines and published rules giving instructions on the proper use of these technologies.
Training Is a Perishable Skill
The success or failure of a security program could depend on the training curriculum, security awareness information, and education materials designed not only for the security team, but also for the entire organization. Non-security personnel must receive ongoing and current training on safety-related information regarding emergency preparedness, fire prevention, and workplace violence mitigation, among many areas. Your best practice based security program should combine research, collaboration, institutional knowledge, and professional experience to produce training that engages people by providing practical and hands-on tools they can implement immediately.
Necessity Is the Mother of Invention
We adapt our policies and procedures to our needs and current situation. And the need for most new policies and procedures is driven by knowing current best practices and awareness of emerging threat scenarios. With clients in both the public and private sector, The Lake Forest Group offers you insight acquired through decades of engagements helping organizations assess their current security program—beginning with their written policies and procedures. From there, we can ensure that your corporate environment, financial services, international affairs, business operations, brand integrity, protective intelligence, operational protocols, budget execution, and human resources are built on a strong, best-in-class security foundation.
High Stakes for High-Rise Security and Safety
The global image of every major urban area throughout the world is shaped and characterized by the tall and dynamic structures that pierce the city skyline. And because husbands and wives, mothers and fathers, daughters and sons spend their days within these structures, protecting human lives is paramount to successful high-rise security. The recent fire that engulfed a 63-story hotel in Dubai on New Year’s Eve stands as a real-world example of the dangers high-rise buildings, their managers, and their occupants face every day.
It All Starts with Access Control
No matter how tall or big a building may be, the #1 security and safety concern is controlling access to the property. Access control is not only about people entering the site, but it also concerns vehicles, mail, packages, deliveries, and equipment. Different types of people — residents, employees, contractors, clients, visitors, and service personnel — can be separated by their respective reasons for requiring access to the building.
A truly holistic approach to protecting the building and the people within it addresses all access control areas, individually evaluates each entry point, and offers specifically tailored measures to control access. While an ID badging system will filter and identify individuals once they are on the property, the loading dock for entry of deliveries and trucks and the mailroom used to screen packages require other means to control access. Some of the more sophisticated access control measures are x-ray screening, metal detection, and biometric readers.
Let’s Talk About Hardening the Target
Security- and safety-related policies and procedures, such as visitor management and mail screening, can assist in mitigating risk to a high-rise building along with these tangible items that can harden a venue:
• Property barriers
• Vehicle barricades
• Blast resistant window film
• Electronic locking devices
• Card access systems
• Intrusion detection systems
• Video surveillance systems
These examples offer different options for you to consider when crafting the security posture for the property. Highly visible signs that inform visitors of the building rules, list prohibited firearms, or point to an emergency exit can increase safety and provide cost-effective solutions. More expensive items such as closed-circuit television (CCTV) are typically planned and allocated within a security budget. Regardless of cost, these areas need to be addressed to harden the property.
How Do I Escape From the Penthouse?
One of the greatest challenges of effective high-rise security involves an emergency evacuation from a floor higher than a rescue ladder can reach. Since most hook and ladders cannot go above the 10th floor, a well-designed and continuously trained emergency evacuation plan combats this logistical issue as well as other challenges inherent to building security. All occupants should know what to do in an evacuation and where to go regardless of where they are in the building. You must be committed to education and dissemination of critical information, such as the location of the emergency exits and shelters areas, if evacuation is not possible.
What Else Do I Need to Know?
Additionally, you need to follow fire codes, test smoke detectors, conduct fire drills, assign emergency roles, designate floor monitors, select searchers, and coordinate with first responders. You must make current rosters of building personnel available, including handicapped and elderly individuals, and publicize basic fire safety “don’ts” like using an elevator, moving to the roof, or breaking a window. Be sure to recognize that information is your great ally—the more that you can provide, the greater the potential for a safe outcome.