Thursday, January 10, 2008

Biometric Security

There is a lot of vendor advertising material floating around boasting the benefits of biometric security systems. A number of construction companies I know are considering access control systems for their construction sites. Some have been advised this is the way to go if you want high security outcomes. The main benefit extolled is that you can rely on biometrics to "man" an unmanned gate - ie by installing a turnstile.

I would advise caution before going down the path of a biometric security system rollout. The important thing to focus on is the business outcome that you are trying to achieve. If you are building a military installation where access control is a premium requirement, by all means, biometrics could be the answer to a difficult security question. However, if all you want to achieve is head count with an added degree of access control, then simple bar code technology could suffice. The difference here in cost could be in the order of 10k to 160k - so consider carefully what you want to achieve before moving forward.

On the issue of securing a gate with a turnstile and biometrics combination I would advise watching the linked Mythbusters video below. This video is not meant to detract from the value of biometrics, rather, it should serve as a clear warning to choose equipment from a reputable supplier with a proven track record.

I have linked anther video which describes the different types of biometric technolgy that is on the market. I will blog specifically on each over the following weeks.

Steve
www.misedio.com

Links
Mythbusters crack fingerprint reader...with wet paper photocopy!!!
http://www.youtube.com/watch?v=LA4Xx5Noxyo&feature=related

Silcon.com outlines biometric technology
http://software.silicon.com/security/0,39024655,39169487,00.htm

Friday, January 4, 2008

Liability for Security Contractors

Ive taken this one from my Misedio website - courtesy WorkCover NSW.

Its a good reminder why principal contractors engaging security (or any sub-contrator actually) MUST ensure their subbies have adequate insurance coverage. If your sub-contractor has ineffecitive cover (ie no coverage at all) the principal contactor will be up for the bill (or their insurer will, if its covered in their policy).

$407000 fine for subcontrator employee fatality
In the NSW Industrial Relations Commission in 2005 a head security contractor, a company it had engaged as a sub contractor, and a director were issued fines totalling $407,000. The Workcover CEO said, “This judgement is a landmark decision, which has clarified that the place of work definition in the Occupational Health and Safety Act 2000 applies equally to principal contractors and sub-contractors.”


Of note, principal contractors often rely on invoicing as a way of controlling their contactors ongoing insured status. They demand that sub-contractors must submit a copy of their current insurance policy prior to issuing payment of an invoice (as principals know,under the security of payments legislation, this is in fact law). However, this system does not adequately cover the situation of insurance expiring immediately AFTER an invoice has been paid. You could potentially have an uninsurred contractor working for you, and not have this identified until the next invoice is recieved for payment.

Don't say I didn't warn you......

Steve
www.misedio.com

Links
Misedio website where article can be found:
http://www.misedio.com/Resources/CaseWatch/tabid/305/Default.aspx

Workcover website where article can be found:
http://www.workcover.nsw.gov.au/MediaResources/MediaReleases/2005/security_firms_fined_after_fatal_robbery.htm

Thursday, January 3, 2008

Easy and Effective Risk Analysis

I've written before on this blog about site security guarding services and their critical function on construction sites. Well, ive just come across this excellent and simple risk assessment checklist by Ashmark security of Melbourne (Australia). This list contained on this page asks the simple questions that should get any site or project manager thinking the right way about construction site security. The fact that Ashmark are asking their construction clients whether their gate hinge pins are spot welded tells me that this is a company that KNOWS the environment into which they are selling services.

If their webswite is anything to go by, if you are looking for a security provider in Melbourne, I would think they are well worth checking out.

Steve
http://www.misedio.com/

Links
Ashmark Website:
http://www.ashmarksecurity.com.au/scripts/default.asp?idPage=5&Name=Home

Ashmark page on which risk assessment information is found:
http://www.ashmarksecurity.com.au/Scripts/default.asp?idPage=4

Wednesday, January 2, 2008

Internet Connectivity for Construction Sites


One of the big challenges I've confronted with in the past has been how to get wireless internet across a big construciton site. The benefits in respect of productivity are numerous - getting staff on site connected on a permanent basis to office resources means less trips back to the office and less mistakes made in the field. From a risk management perspective 'site wide' internet connectivity allows for numerous management systems to be put in place. If you could provide sub-contractor access to a site wide network this would have substantial efficiency benefits. In the circumstances I was dealing with my issue was needing to provide handhelds that security staff were using with real time access to the security management system.

With unlimited resources providing site wide access is not a difficult thing to do. There are many proprietary systems around that will provide a solution. However, doing it cost effectively is another matter all together. Running cabbling is problematic in terms of the cost (versus benefit), and there is the constant issue of signal degredation of of wireless access points where these are used.

Enter Meraki
It was with great interest that I read the linked article on the Sydney Morning Hearld website. The article discusses Meraki wireless networking technology, and on the face of it, it looks like this could be a 'hot' wireless solution for construction projects. The technology allows you to install wireless access points. These subsequently 'talk' to one another, enabling the signal to be hopped around the site via each access point. So rather than using cabling to carry the signal, each access point forwards the signal on. You can put as many of these around the site as you like. There is also the option to install solar powered units (no specifications available on usage testing ie how does the unit perform on a cloudy day).

Quite astoundingly, the Meraki solution costs just $99 - $149 for each wireless access point - depending on the features you want and whether you want an outdoor or indoor version. This is amazing when you consider that solutions I have previously priced up ran out at 600$ - $1000 per access point!

The Meraki solution also supports a fully outsourced billing system. This means you can open up the wireless network to your subcontractors, and Meraki will look after the billing sytsem - including taking payments. They will forward you any commissions made on sales - which would allow you to easily recoup the costs of installation!

Presuming the meraki system is robust this represents a real game changer for easy wireless access (in a lot of environments outside of construction as well). If you need to get internet access across a a large project it provides a solution that was unavailable at that price point only just over a year ago.

Steve
http://www.misedio.com/

Links

Meraki website:
http://meraki.com/

Sydney Morning Herald Article:

Tuesday, January 1, 2008

New Year 2007




Well 2008 has arrived! I was fortunate enough to see the new year in at Milsons Point in Sydney, Australia - with good friends and a few 'quiet' ones. It was really good to switch off and enjoy what was a fantastic Sydney evening. Happy new year to all!!


Many thanks to our kind hosts for the night - Brett from http://www.gainsworth.com.au/


Steve

Monday, December 31, 2007

Security...Anyone???

In todays highly litigious environment there is nothing more critical to a major contrators risk management control system than effective static guarding security. Particularly in developments that are taking place in urban centres, the good old security guard is the thin blue line between a controlled construction site environment and completely unfettered public access. In some circumstances, the requirement for security will be imposed on you by local council.

So if you are going to have the expense of security at the gate it's in your own interest to get full value out of them. Think about the following points when engaging a contractor, as too often a security guard is employed purely as a "gate" - allowing entry or not. Think more widely when you engage your contractor - what else can they do to support your brand and corporate image? When drafting your security scope think about including the following items:

Clean Site Entry

  • Make security responsible for keeping the site entry clean. Provide brooms and shovels and a handy bin to facilitate this. A clean site entry says a lot about site managment - particularly when you have important (senior managment or government regulators!) coming to site unexpectedly.

Graffiti Removal

  • The best way to stop graffiti is to remove it as soon as it appears. Security (particularly night security) can be critical in this. Provide your guards with water based paint, brushes, overalls, and buckets. If your security provider can overwrite graffiti quickly and often enough, you will go a long way to stopping it altogether.

Access Control

  • For the security guard, knowing who should and should not be on site is difficult, particularly on large projects. Different workers starting and finishing on the project every day makes knowing who should be provided with access hard.
  • You can help his situation by providing a dedicated access control system. At it's most minimal level, this only needs to consist of identification cards issued to workers who have successfully completed the site induction - preferably with photos. These can then be presented to security at entry each day. Systems on this scale start at around 10k installed - which is a small investment for the benefit it delivers.
  • More sophisticated systems are available, ranging in price up to 160k. These include smart card technology. However, in considering these, really examine the value proposition attached to implementation and use. In my experience, the benefit you get from 10k is not that much different to 160k, so be wary.
Effective security can be a real asset. It sometimes requires you to think outside the square at the time of drafting up the scope of service.

Steve
http://www.misedio.com/


Sunday, December 30, 2007

REAL contractor risk mangement

Ive just seen the system that e-VERIFILE has implemented for Union Pacific Railroad in the US. The system is called e-RAILSAFE and it is used to control how Union Pac deals with its contractors. What e-VERIFILE have done here is THE future of operational risk management, and closer examination of what they've done is very instructive.

e-RAILSAFE requires all prospective Union Pac contractors to log on and register at the e-RAILSAFE website. Here, contractors upload company and employee information. e-VERIFILE then undertake background checks on the company and its employees. Where unacceptable risk is identified, Union Pac, the contractor and the employee are notified - and given the oppertunity to 'appeal'. If accepted, the contractor is then required to remain compliant with Union Pac requirements while ever they remain contracted.

How valuable is this for Union Pacific! Weeding out the problem contractors BEFORE they become a problem significantly reduces the organisations "risk footprint".

The only limitation here is that e-RAILSAFE doesnt extend the verification capability beyond e-VERIFILE to other industry experts. This small proprietary element is actually very limiting. As good as e-RAILSAFE sounds, it would be better if the qualitative process could be extended outside of e-VERIFILE's internal capabilities.

This of course is what Misedio.com is all about - taking this concept and extending it, without limitation, throughout the entire construction industry. Good on e-VERIFILE though! They are way in front in terms of bringing real risk management to the market via the internet channel.

Steve
http://www.misedio.com/

Links
Article at SecuritySolutions.com: http://securitysolutions.com/access_control/security_screening_safety/
e-railsafe website: http://erailsafe.com/
e-verifile website: http://www.e-verifile.com/