SASIG calls for greater focus on real-life cyber resilience

The most common form of cyber attack was phishing attempts (83%), although of the 39% of businesses mentioned, around one-in-five (21%) identified a more sophisticated attack type such as a Denial of Service, malware or ransomware-focused episode.

Within the group of organisations reporting cyber attacks, 31% of businesses and 26% of charities estimate that they were attacked at least once each week and one-in-five businesses (20%) and charities (19%) say they experienced a negative outcome as a direct consequence of each cyber episode.

Issue for the business community

Martin Smith MBE, founder and chair of the SASIG, said: “It’s clear from these latest Government findings that cyber attacks are still very much an issue for British businesses, be they small or large in scale. The findings illustrate that the impacts of these attacks are operational and financial, with the estimated average cost of attacks in the last 12 months amounting to £4,200 and rising to £19,400 when looking specifically at medium and large-scale businesses. The Government itself admits that these figures are also probably underreported, which is extremely worrying.”

Smith went on to comment: “While many businesses are working to prevent such attacks and put plans in place to deal with them when they do occur, it’s abundantly clear that more work needs to be done in this area.”

The survey has identified key areas of weakness, which include the fact that almost half of businesses (46%) had not taken action to identify cyber security risks in the past 12 months. There are broader supply chain issues in terms of cyber security and a lack of understanding of cyber risks at Board level.

Smith concluded: “Threats are constantly evolving, so it follows that having clear and concise cyber security procedures that are respected and adhered to business-wide is going to be key for building robust resilience.”

Read the full story here.

Liberty’s “landmark” case against mass surveillance takes step forward

Liberty’s application to appeal was approved on five grounds, two of which the Government conceded on. In its application to appeal, Liberty argued the safeguards in the Snoopers’ Charter (the Investigatory Powers Act 2016) breach privacy and free expression rights as they do not protect against the dangers of bulk powers. According to the civil rights group, the latter allow spies to scoop up the private communications and Internet data of swathes of the population, hack into computers, smart phones and tablets and create vast ‘personal datasets’ without suspicion.

In response to preliminary legal filings, the Government admitted that it could not contest two parts of Liberty’s application to appeal. It conceded that the safeguards around the use of surveillance powers do not protect journalistic confidentiality. The Government further admitted the safeguards fail to protect the right to privacy when masses of intercepted data are searched in a way that can identify people without proper authorisation.

As well as those issues, the High Court found that Liberty’s other arguments must be heard at appeal, including that safeguards in the Snoopers’ Charter regarding sharing intercepted material with overseas Governments and around lawyer-client communications were inadequate. Judges also found that Liberty’s arguments over the power to create “bulk personal datasets” must also be heard at appeal. A hearing is now expected later this year.

 

Read the full story here.

Police Scotland introduces simultaneous live drone and helicopter video streaming

 

POLICE SCOTLAND has become the first UK police force to implement UAV video technology with the capability to live-stream from drones and helicopters. The newly deployed ExStream UAV Streamer, developed by Excelerate Technology, was customised to improve situational awareness across air-to-ground operations, solving the long-term issue of the feed only being visible to a single operator or otherwise a ground-based unit.

The UAV Streamer connects to existing UAVs and other video devices and delivers the video into Excelerate’s ExStream video streaming service even when only low bandwidths are available from the field. From there, users can access the remote streams via dedicated iOS and Android applications, Windows and Mac clients in addition to a secure web portal.

Police Scotland commissioned the complete package to be in place to stream helicopter downlink into the Control Room during COP26 in November last year.

Real-time aerial view

Inspector Nicholas Whyte of Police Scotland’s Air Support Unit stated: “Police Scotland remains focused on providing officers with innovative solutions that help us to keep people safe. The Excelerate technology allows the Air Support Unit to downlink live footage from the helicopter or drone to any Control Room in Scotland, to police commanders on the ground and to officers’ police-issued mobile devices who are directly involved with the incident. This gives those involved a real-time aerial view of events, enabling them to make better informed decisions about an operation or search as well as maintaining officer and public safety.”

David Savage, founder and CEO at Excelerate, explained: “Our solution to allow streaming from a helicopter to the Control Room during COP26 is a perfect example of Excelerate’s DNA in action. The challenge was to provide a robust end-to-end solution to very specific requirements. We did so through the problem-solving and ‘outside of the box’ thinking that have been our hallmark over two decades of experience and investment in secure infrastructure and connectivity ecosystems for UK and overseas Emergency Services.”

Read the full article here.

London terror review

Security and preparedness need to be built into London’s fabric and effective protection against terrorist attack must be a city-wide endeavour, concluded Lord Toby Harris in a second review of London’s preparedness for a terrorist attack and implications of the covid-19 pandemic for the capital’s immediate and long-term preparedness.

Lord Harris has made 294 recommendations; covering funding of the emergency services and equipment; specialist training for teams to deal with types of attacks, and improving information sharing, given the shared responsibility of countering terrorism, including by businesses and civil society.

He said in a foreword to the report: “My broad conclusion is that very substantial progress has been made by the emergency services and other agencies in response to my 2016 report and in following up the lessons of the attacks in 2017 and subsequently. I have been impressed by much of the work that has gone on, and in the detail and care that has been devoted to analysing what happened in the attacks on Westminster Bridge, on London Bridge, at Finsbury Park, at Parsons Green, at Fishmongers Hall, in Streatham and, of course, at Manchester Arena.”

He went on to say that London bears the highest risk of terrorism in the UK, ‘containing as it does the largest number of high-profile targets and the greatest concentration of subjects of interest. I do not believe that this is always adequately recognised in the national allocation of resources’. While acknowledging the recent rise in police number under the Boris Johnson Conservative Government, he said this will mean ‘a disproportionately high number of officers with limited experience’ and a shortage of detectives.

The London Ambulance Service is particularly stretched, he wrote. However, many services, especially those in local government, are essential in preventing terrorism and ensuring preparedness. “Ten years of austerity has left youth provision, mental health services, and the voluntary and community sector under-resourced – in some cases woefully so. The consequences of further cuts will be to leave the network that enables society to respond to those who need support to avoid falling into violent extremism, and to respond effectively and rapidly to an emergency incident, spread worryingly thin.”

Background

In July, the Mayor of London, Sadiq Khan, commissioned the Labour peer Lord Harris to review of London’s preparedness for a terrorist attack. The backdrop; the changing nature of the threat of terrorism including online extremism, more referrals to the UK authorities’ Prevent programmes for concerns of extreme right-wing radicalisation, more people self-radicalising online and a possibility of hostile state-sponsored acts.

Lord Harris’s first review was commissioned by the Mayor in 2016. Over the last six months, Lord Harris has had over 100 interviews with the emergency services, the transport sector, City Hall, and local government, besides with civil servants from several central government departments, the Speaker of the House of Commons Sir Lindsay Hoyle, and Parliament’s Director of Security.

 

Read the original article here.

Cumbria Consortium appoints Mitie on £500 million IFM contract

MITIE HAS been awarded a new integrated facilities management (IFM) contract by the Cumbria Consortium, which includes Sellafield Ltd. The contract is worth up to £500 million. With an initial term of five years, and an option to extend for up to five more years, Mitie will provide all facilities management services across the sites, including security, engineering, cleaning, waste management, grounds maintenance, catering and specialist projects.

 

In addition to Sellafield Ltd, the contract will also cover locations across Cumbria and Warrington.

Mitie first began its relationship with Sellafield Ltd, Europe’s largest nuclear site, back in 2003 when it secured a cleaning contract for the facility. Mitie’s relationship with Sellafield has evolved over nearly 20 years as the service requirement has expanded through competitive tenders and awards to cover a full IFM offer across all of the Cumbria Consortium sites. Circa 650 Mitie colleagues now work on the contract.

As well as its significant experience gained in supporting the Cumbria Consortium and delivering services that comply with strict nuclear regulation, Mitie’s social value commitments were also key to its successful retender.

In line with Mitie’s commitment to support the development of future talent through apprenticeships, the business has also committed to upskilling at least 30 colleagues per annum via an apprenticeship, as well as supporting 20 apprentices within Mitie’s supply chain and wider business.

Further to this, the Mitie team will provide a number of work experience opportunities for young people resident in the local community.

Mitie plans to make significant investment in initiatives to support the local community, such as offering local entrepreneurs an opportunity to pitch for investment through a Dragon’s Den-style competition, as well managing a ‘Leader to Leader’ mentoring programme for up to 20 leaders of local SMEs and voluntary community social enterprise organisations.

Read the full article here.

SASIG and UK Cyber Security Council tackle sector skills shortage

WORKING IN partnership with the UK Cyber Security Council, the Security Awareness Special Interest Group (SASIG) recently brought together hundreds of future cyber security professionals with leading employers in the sector at the third SASIG Cyber Security Skills Festival. The virtual festival showcased the challenges, opportunities and rewards available from a career in cyber security.

 

 

The Department for Digital, Culture, Media and Sport recently revealed that employment across the cyber security industry rose by 13% during 2021, with more than 6,000 new jobs created, in turn opening up a raft of opportunities for individuals up and down the UK. This growth has witnessed the total number of people working in cyber in the UK rise to 52,700.

The SASIG Cyber Security Skills Festival attracted more than 600 delegates and featured an entire day of presentations and workshops. The jobs fair ran alongside the main event and hosted 37 organisations from all sectors, among them 73 UK universities and public bodies. The day engendered 865 conversations and realised 4,618 chat messages.

Delegates learned about building a successful career from both seasoned professionals and recent graduates. In addition, over 1,000 job applications were submitted at the jobs fair and helped fill vacancies being advertised by firms hungry to find new talent.  

Martin Smith MBE, founder and chairman of SASIG (and who began his cyber security career with the Royal Air Force back in 1981), has reiterated the fact that the Cyber Security Skills Festival’s key objective was to boost the profile of cyber security as a rewarding career and attract new entrants.

Smith explained: “Cyber security is every bit as much a ‘people’ business as it is one necessarily focused on technology. It embraces management, people and technical skills and, as demand grows, there are huge opportunities. This year, we made a strategic move to reach out beyond our traditional cyber security community and seek to attract new entrants from all areas. Whether you’re a historian, a musician or an engineer, there are opportunities at all levels. We want to help our community bridge the skills gap.”

 

Read the full article here.

Video technology deployment and uses in the UAE and globally

Europe and UAE will see a surge in the deployment of advanced video technologies according to new research conducted by the global market intelligence firm IDC

The majority (84%) of European and UAE organizations plan to deploy advanced video technologiesVideo technology has moved beyond the realm of just being confined to the security industryVideo-AI solutions can run scans to match the faces of a suspected person with a criminal database

Europe and UAE will see a surge in the deployment of advanced video technologies according to new research conducted by the global market intelligence firm IDC. 

Technology developments in AI, image processing, cloud computing, and sensors are rapidly expanding organizations’ application of video and sensor technology and the business outcomes they deliver.

Dahua develops integrated off-grid security solutions for monitoring of scenarios beyond the grid lines

Thinking of installing a surveillance system but the site is located off the grid? Yeah, that could be troublesome, and often requires great patience as long as the power grid line itself. A lot of people may think that just because they do not have the same infrastructure as what they have in the city, deploying a surveillance system in a remote area may not be the smartest idea due to antiquated source of power supply, lack of relevant devices, costly installation, and maintenance, etc.

Nevertheless, with the advent of continuous innovation and development in technology, intelligent solutions are gradually emerging to make sure that any area, whether on-grid or off-grid, is not left behind. One of these solutions involves harnessing solar energy, which is one of the predicted technology trends for 2022.

Challenges

Deploying outdoor surveillance monitoring in an off-grid scenario could be very challenging compared to its conventional counterparts. Installation of traditional outdoor surveillance requires laying large cables and setting up stable networks, which areas off the grid might not be able to accommodate.

An off-grid monitoring scheme often involves solar panels and wireless transmission technology to do the trick

An off-grid monitoring scheme often involves solar panels and wireless transmission technology to do the trick. However, doing so comes with hefty costs in installation and maintenance. Every device must be installed independently, and the whole system lacks basic maintenance features, making it impossible to be operated remotely and generate on-site fault data in time.

Here’s where Dahua comes. With its accumulated experience in technology and innovation over the years, Dahua has developed an integrated off-grid security solution that ticks all the boxes for effective and efficient monitoring of scenarios beyond the power grid lines.

Dahua’s Integrated Off-grid Security

The Dahua Integrated Off-grid Security combines 4G network transmission technology, video surveillance (including AI functions), and solar power technology to build an integrated off-grid monitoring system. It is suitable for areas with no access to electricity and network connection.

This solution includes a solar module primarily made of monocrystalline silicon with an aluminum alloy frame and tempered glass panels. It offers excellent weak light performance and outstanding solar cell efficiency.

Features of the solution

2MP/4MP camera offers high performance 4G module and AI functionalities to amp up monitoring

In addition, its MPPT Solar Controller boasts high charging efficiency (>99%), RS-485 communication, and 10A maximum charging/discharging capability. Since the entire equipment has IP66 waterproof rating, its lithium battery, controller, and other components are well protected against harsh weather or jarring outdoor conditions. It also ensures a long product life, making every penny of the investment count.

The 2MP/4MP camera itself has an ingress protection rating of IP67. It offers high performance 4G module and AI functionalities that can amp up the monitoring operation just like those in regular application scenarios found in the city. There are also pole mount and wall mount options for the mounting brackets, which are waterproof and present a hidden line design.

Decreased installation and maintenance costs

With the integrated components clearly stated above, the benefits of this solution need no further explanation. It doesn’t require extra cables for network and power connection as it is equipped with a robust solar panel and a built-in 4G module that enables stable wireless transmission of data.

Its sophisticated and integrated design significantly reduces installation and maintenance costs. Its high ingress protection ratings ensure that all parts of the equipment are well protected and can withstand the all-weather operation.

Remote monitoring and maintenance

All of the advantages contribute to the entire system’s excellent monitoring performance

When connected to Dahua NVR and DMSS mobile app, users can view real-time videos of the monitored scene and check battery status, allowing for remote system monitoring and maintenance.

They can also receive alarm push notifications when the battery level is low or when an intrusion has been detected. Overall, all of these advantages contribute to the entire system’s excellent monitoring performance in off-grid environments.

Application scenarios

The Dahua Integrated Off-grid Security is a lightweight outdoor monitoring solution that is ideal for a wide range of application scenarios. It can be deployed in conventional areas like scenic spots, small construction sites, farms, roads, etc.

It is also applicable for small-scale industrial scenarios such as mining areas, oil/transmission lines, water reservoirs, and other critical zones. Aside from that, this flexible monitoring solution can also be used for outdoor events like sports games, conferences, concerts, etc.

Why parking lot surveillance is central to the new security ecosystem

During the first part of the pandemic, parking lots were an abandoned frontier. Like retail shops, offices and schools, parking lots were mostly left vacant as people followed lockdown and social distancing rules.

But as the world has opened up again and re-introduced the routines of normal life, parking lots are seeing new waves of activity. And not all of them are welcome. 

Criminals are finding new ways to target vehicles, entire fleets and even individuals. And, at a time when companies are facing economic pressures of all kinds, it’s prompting businesses to rethink how parking lot security fits into their larger customer (and employee) experience and safety ecosystem. 

In many cases, companies are not only short-handed when it comes to keeping up with new security needs, but they’re also facing a new set of customer and employee expectations. By addressing parking lot security with cutting-edge video surveillance, businesses are finding that they’re not just protecting assets parked outside, they’re securing interests across their entire footprint.

Preventing theft and improving worker safety

 

In communities across the country, for example, thieves continue to swipe catalytic converters from cars in hopes of re-selling components like palladium and rhodium, which are valued at record highs. According to the National Insurance Crime Bureau, catalytic converter thefts soared from an average of 108 per month in 2018 to 1,203 thefts per month in 2020. This year, that trend appears to be continuing, in part from incidents in office parking lots.

 

As workers return to the office, criminals are realizing that office lots are full of cars that are going to be unattended for many hours of the day. In some places, they’re able to cut the catalytic converters out of 100 cars in a matter of hours. And employers are starting to realize that liability for these break-ins rests with them.

 

Traditional video surveillance set ups can record footage of the break-ins for future review. But contemporary solutions give employers the power to stop break-ins as they happen. With 24/7 remote surveillance camera systems, employers can set up cameras on their sites but assign monitoring to teams off-campus. When those teams spot suspicious and unlawful activity, they can use the system’s connected speakers to broadcast warnings to trespassers and then send an alert to on-site security personnel and local law enforcement.

 

For one big-box retailer, remote surveillance systems helped drive a 40% reduction in parking lot incidents, with some locations reporting a 70% reduction.

 

This technology is not only helpful for companies that are responsible for protecting their employees’ property; it’s valuable for protecting the employees themselves. At distribution centers, where workers might be responsible for managing the overnight shift alone, remote surveillance camera systems can ensure that multiple eyes are keeping fleets of vehicles — and workers — secure. In those scenarios, the cameras can provide assurance that workers are safely within view and issue an alert when employees are off-screen for prolonged periods.  

 

Adapting to meet changing needs

 

Another key advantage of newer remote surveillance solutions is their ability to help businesses stay on their toes. As criminals find new ways to be creative, businesses need the flexibility to change up their security strategies — from moving cameras to different locations to altering the times of day remote monitors are most active. 

 

Mobile video surveillance set ups offer the level of adaptability companies require. If a business catches wind of an impending event, they can temporarily place cameras in the locations with the best viewpoints and access. Or if they realize that trespassers are taking advantage of a blind spot on their property, they can adjust their setup to prevent further break-ins.

 

That kind of versatility is especially important now, as the country navigates a dynamic transition out of the pandemic. Community park and ride lots, for example, have seen a surge in criminal activity as commuters return to work. But given that return to office and transit trends are still in flux, communities can’t expect last month’s violations to necessarily define incidents on the horizon.

Stadiums and entertainment venues are also grappling with new traffic and crowd management patterns. Keenly interested in encouraging the public to return to events, sports teams are increasingly invested in the entirety of the fan experience — from the time they pull out of their driveway to the moment they return home. 

 

Mobile surveillance units create the opportunity to monitor and influence traffic activity in real time, preventing parking lot congestion and reducing safety incidents. Before, during, and after events, security personnel can monitor live streams, coordinate with on-the-ground colleagues and law enforcement to redirect vehicles, and issue alerts about suspicious behavior. 

 

Uncovering critical intelligence

 

Additionally, video surveillance systems can play a powerful role in uncovering valuable information about specific incidents and security trends in general. In the aftermath of break-in or theft, video surveillance units can provide identifying details about trespassers and reveal the full scope of a crime. On an ongoing basis, video surveillance can help businesses and residential areas develop a deeper understanding of their properties’ threat landscape. 

 

For example, homeowner associations are banding together to purchase systems that monitor the ingress and egress of their neighborhoods. While many homes may already have mounted cameras, the video quality is often not high enough to deliver critical information, like license plate numbers. Additionally, in many cases, existing camera systems may not store footage for more than 24 hours. And that time frame isn’t sufficient for investigating car break-ins, hit and runs, or package thefts. 

 

Video surveillance is also helping car rental companies keep up with an uptick in demand. As cars enter and depart their lots, rental companies are using surveillance systems to monitor not only car conditions but also log license plate numbers. From a security standpoint, the technology is helping to protect customers and vehicles. But it’s also serving an operational role by streamlining an otherwise labor- and time-intensive process. 

 

Bringing a new dimension to the in-store ecosystem

 

Finally, video surveillance installed in parking lots can powerfully enhance and complement other security measures, especially when they’re thoughtfully woven together.

 

Michael Lamb, a security consultant with 40 years of experience in asset protection, including top leadership roles with the Kroger Company, The Home Depot and Walmart, says that companies are increasingly looking past one-off solutions. Instead, they’re embracing an ecosystem approach that connects the dots between safety and security needs and customer experience.

 

In that model, facial recognition systems aren’t siloed from parking lot video surveillance towers or cart management programs or other secure checkout tools. Instead, they work together to create a “flywheel” that contributes to security, revenue and brand goals, he says. By sharing data in a unified platform, businesses can go beyond using security technology to stop or apprehend a criminal. They can also use pooled data to make smart decisions and more accurate forecasts, and build stronger relationships with customers and employees. Even more, as safety concerns take center stage, ecosystem approaches to security and safety can help businesses prevent liability claims. 

 

“The notion of safety is paramount to the customer experience,” he says. “One of the prevailing points of view within organizations is the importance of prevention, particularly within ecosystems where you’re connecting the dots across security technologies. And parking lot surveillance fits into that as a mitigating technology.”