BrakeSec Education Podcast 2021-012-physical security discussion with @geecheethreat and @garrisony75 -pt1
Bios for guests
Reparations.tech *Public Safety Coordinators -Field Operations (Road Incidents) -Specialized Buildings (The Library, Medical Facilities, CCR) *Public Safety Officers A. Discuss Training -SOP Creation *SOPs are very custom and dependent on the organization. There are no “NIST” standards.[IN CYBER: Frameworks for Physical Security ---> ]
*Think on your feet, many plans often get thrown out the window. *Creating policies due to unforeseen incidents -Physical Security Assessments: Fire Panels, AED, Roof Accesses
*The Checklist: Baseline configuration of the operations for a building *Locksmith Troubleshooting *Lack of Funding (Historically) + Ways to Address this In-House
- Situational Awareness (?) “What is Situational Awareness?”
-There’s a lack of good training to discuss their own physical security
*Ph.Ds leaving car doors wide open, blaming safety officers when they mess up *Common sense is not so common *Scenarios don’t always cover every event
*Dead bodies, car accidents, people streaking (lol), medical issues-Policies can be simple, like opening a car door
*Need to vet whether the person is actually their car
Have you seen both good and bad training on situational awareness? Does it seem to differ between physical and cyber security?
Summary of the Clery Act | Clery Center“The Clery Act is a consumer protection law that aims to provide transparency around campus crime policy and statistics.
In order to comply with Clery Act requirements, colleges and universities must understand what the law entails, where their responsibilities lie, and what they can do to actively foster campus safety.”
C.Real Life examples of Physical Security Blunders
- Death of Elisa Lam - Wikipedia
- Crime Scene: The Vanishing at the Cecil Hotel - Wikipedia
- STORY: Person called a SOC, asked to get into their car ( but not their vehicle)
- Performing multiple sweeps of common areas to prevent squatting
- Staff “tripping” alarms
- Deceased Faculty + No Sleeping Policy
- Working as a Team
*Escalation Management
*Police are often increase tensions when de-escalation is needed. *Working as a team *Locksmith Team + Public Safety Team *Looking for talent in unexpected places to transfer over to CyberSecurity (Build the Bridge)
Lockpicking Community: [insert folks on twitter / youtube]
- companies heading back to work
- What should IT or Security think about for your businesses that may not have had people in for 6-9 months?
- If companies don’t have cameras or physical controls, should they think about looking at improving?
- Connect with Us! Liana McCrea: @GeecheeThreat (Twitter) + LinkedInGarrison Yap: Garrisony75 (Twitter) + LinkedIn
5 Ways IT Managers Can Work with Their Physical Security Counterpart (stanleysecuritysolutions.com)
12 Security Camera System Best Practices – Cyber Safe (een.com)
What is Physical Security? Measures & Planning Guide + PDF (openpath.com)