asis News July 2017GP0|#28ae3eb9-d865-484b-ac9f-3dfacb4ce997;L0|#028ae3eb9-d865-484b-ac9f-3dfacb4ce997|Strategic Security;GTSet|#8accba12-4830-47cd-9299-2b34a43444652017-07-01T04:00:00Z<h4>​Seminar Education More Dynamic, Immersive</h4><p>The buzz about the 2017 ASIS Seminar and Exhibits is all about compelling keynoters, networking opportunities, revitalized social events, a new show floor footprint, strategic partnerships, and a dynamic schedule. But the heart of ASIS’s annual Seminar and Exhibits has always been its education. </p><p>This year, Seminar planners are focusing on showcasing essential content in the most useful formats. Now that the show floor will open on Tuesday, Monday is reserved for education only. Educational sessions will be more varied than ever before. Traditional presentations, such as 60-minute panel sessions, will still be available, but innovations will include more than two dozen 25-minute impact-learning sessions on the exhibit floor and immersive deep dives in the classrooms. Some classrooms will have innovative setups, such as fishbowls, to accommodate different teaching styles and formats. And some sessions will be live-streamed so that anyone unable to make it to Dallas will be able to participate online.</p><p>Forty-third U.S. President George W. Bush kicks off Monday morning with an exclusive, off-the-record keynote address, which will touch on his eight years in the White House, his experience with world leaders, the nature of public leadership and decision making, and his perspective on current domestic and international issues. This will be followed by a lively State of Security conversation led by ASIS CEO Peter J. O’Neil, CAE, and 2017 ASIS President Thomas J. Langer, CPP, who will share their perspectives on where the Society is heading in the months ahead. </p><p>Monday continues with a full slate of learning sessions starting at 10:45 a.m. Highlights include a panel on integrating millennials into the workforce, corporate security’s role in preventing domestic violence, and exploration of effective change management. </p><p><img src="/ASIS%20SM%20Callout%20Images/0717%20ASIS%20Stats.png" class="ms-rtePosition-1" alt="" style="margin:5px;width:279px;" />Monday’s 2 p.m. sessions include several deep dives. One interactive session led by Jeff Slotnick, CPP, PSP, will group attendees into corporate departments such as risk, security, and environmental health and safety, then ask them to collaboratively apply principles of Enterprise Security Risk Management to deal with an emergent situation. Another deep dive will analyze last year’s high-profile robbery of a reality TV star in Paris.</p><p>Monday afternoon also offers a session on Super Bowl LIVE! That event was a 10-day fan festival in Houston preceding Super Bowl LI. A multijurisdictional partnership of law enforcement agencies and corporate representatives created a smart city that left a legacy of crime reduction and sustainability. Monday’s final slot of the day includes such topics as facility design, violence mitigation, radicalization, and doing business in Latin America.</p><p>Many learning programs move to the exhibit floor on Tuesday through Thursday. Two theaters will host 25-minute impact-learning sessions over the three days. As with the classroom programs, several will be presented by seminar partners InfraGard and ISSA; those will focus on critical infrastructure protection and cybersecurity.</p><p>Tuesday’s lineup features additional deep dives: the ASIS Board of Directors convenes to discuss global threats affecting the security profession; a mock trial litigates the aftermath of a terrorist bombing; and Tuesday morning keynoter Scott Klososky will examine the integration of technology in our lives—from wearables and implantables to the rapid growth of artificial intelligence and augmented reality. Later in the day, he will delve deeper into his concept of HUMALOGY (humanity and technology). Other topical sessions cover grid security, workplace bullying, metrics dashboards, and security risks in the European migrant crisis.</p><p>On Wednesday, retired FBI Special Agent Richard DesLauriers and former Boston Police Department Commissioner Ed Davis will give a presentation showing how teamwork and information sharing led to the capture of the Tsarnaev brothers following the Boston Marathon terrorist attack. After the keynote a full day of classroom and show floor presentations ensue. Look for sessions on the Dallas police shooting, defensive use of drones, penetration testing, a case study of archaeological site security in Spain, transitioning from the military to the civilian world, and social media risks.</p><p>Thursday begins with a powerful keynote presentation followed by a half day of education taking place on the exhibit floor. Session topics include school and campus security, travel risk management, data protection, and balancing security program elements. </p><p>In addition, there will be professional development opportunities in the Career Center, “fireside chats” in the ASIS Hub, and much, much more. Visit to keep updated on news and program announcements.</p><h4>CSOS ATTEND WASHINGTON SUMMIT</h4><p>The 10th Annual CSO Summit was held in the Washington, D.C., area April 23–25, and organizers took full advantage of the proximity to power by scheduling briefings from top U.S. security officials, as well as an array of private sector security experts.</p><p>Leading the charge of officials was then FBI Deputy Director Andrew McCabe, who gave a wide-ranging, for-attendees-only briefing on the state of national security and the leading threats to the United States. In terms of counterterrorism, McCabe said that the “big three” adversaries to the United States are China, Iran, and Russia, and China is particularly effective in stealing valuable U.S. data and intellectual property. </p><p>“The Chinese are eating our lunch,” said McCabe, who was an afternoon speaker at the summit. The timing of McCabe’s appearance was also fortuitous; just weeks later, McCabe became FBI acting director and was thrust into the spotlight at a high-profile U.S. Senate hearing.</p><p>The day after McCabe’s briefing, William Evanina, the director of the National Counterintelligence and Security Center (NCSC), offered a riveting briefing for attendees. The NCSC is part of the Office of the Director of National Intelligence and is staffed by senior counterintelligence specialists from across the intelligence and security communities.</p><p>Picking up where McCabe left off, Evanina said that U.S. businesses are suffering $500 billion in annual losses from Chinese espionage activities. Recently, Chinese hackers have been particularly effective in targeting law firms that represent U.S. firms, in order to steal patent data and other intellectual property capital. </p><p>The summit began Sunday afternoon with executive coaching sessions, followed by a preconference session on terrorism drivers, and a two-hour opening reception. On Monday morning, the conference began with a bang—an opening keynote address by John Walsh, criminal investigator, victim rights advocate, and host and creator of America’s Most Wanted. </p><p>In a fiery speech, Walsh spoke of the continuing horrific problem of sex trafficking of children, with kidnappers trolling public events for young victims. Repeat offenders often stay one step ahead of law enforcement, Walsh said: “They keep moving, moving, moving, and we don’t catch them.” After the speech, attendees had the opportunity to photograph themselves with Walsh. The line was long.</p><p>Two days of education sessions covered critical leadership issues such as breaking down cyber and physical security silos, using metrics to assess security ROI, and building an in-house intelligence program. Breakout sessions included workshops on cultivating emotional intelligence for effective leadership, and building trust with the C-suite. The conference also featured a private tour of the U.S. Capitol for attendees, and a closing reception at the Ritz Carlton, Pentagon City, which was the main venue for the event. </p><p><em>By Mark Tarallo, senior editor at </em>Security Management<em>.​</em></p><h4>NEW STANDARD PROVIDES SYSTEMATIC APPROACH TO MANAGE RISK</h4><p>In June, ASIS released a new ANSI Standard, <em>Security and Resilience in Organizations and Their Supply Chains </em>(ORM.1). This standard, developed by a technical committee comprised of 78 participants from 20 countries, provides a systematic, jurisdictional/country neutral approach to identify, assess, and manage risks related to an organization’s operations and supply chains. ASIS International is an ANSI-accredited Standards Developing Organization. </p><p>The Standard reflects the understanding that organizations do not operate in isolation but rather as part of a complex and interconnected ecosystem. Therefore, it is not sufficient for organizations to manage just internal risks. The Standard helps eliminate “siloing” of risk by providing a framework for organizations to develop and implement policies, objectives, and programs that consider:</p><p>• Context of the organization and its supply chains;</p><p>• Legal, regulatory, and contractual obligations and voluntary commitments;</p><p>• Needs of internal and external stakeholders;</p><p>• Uncertainties in achieving its objectives; and</p><p>• Protection of human, tangible, and intangible assets.</p><p>ASIS Standards and Guidelines Commission Liaison Lisa DuBrock highlights the importance of this approach, noting, “…in today’s increasingly complex and unstable global environments, the question is not if the security administrator is called upon to support the full spectrum of the standard, but when.”</p><p>This standard replaces the ASIS/ANSI Organizational Resilience: Security, Preparedness and Continuity Management Systems (SPC.1) and ASIS/BSI/ANSI Business Continuity Management Standard (BCM.1). DuBrock says that while the “SPC.1 emphasized mitigation strategies for security and resilience and the BCM.1 standard emphasized traditional response and recovery strategies, the ORM.1 provides a risk-based approach to bring both disciplines together with an added emphasis on supply chain resilience.”</p><p>ASIS members get one free download of ASIS Standards and Guidelines. Learn more at​</p><h4>MEET THE FRONT LINES </h4><p>ASIS International’s member services team is the first point of contact for ASIS members and the security community worldwide. The dedicated team is always prepared to provide information, services, and other support to ensure first-rate customer service.  </p><p>We asked the member services team what they like most about ASIS and our members: </p><p><strong>Monica Escobar </strong><br>Supervisor, Member Services:</p><p>“The security profession and the members we serve make the world a safer place for everyone. It makes the work we do, supporting these wonderful professionals, deeply rewarding.”</p><p><strong>Dionedra Dorsey</strong><br>Member Services Representative:</p><p>“My favorite thing about ASIS is attending Seminar and putting a face to the name of someone I’ve frequently corresponded or talked with.”</p><p><strong>Callie Wysor<br></strong>Member Services Representative:</p><p>“I love the camaraderie at ASIS—my colleagues are friendly, welcoming, and collaborative. The member services team feels like a family.”</p><p><strong>Michael LeMorta<br></strong>Member Services Representative</p><p>“I am proud of the opportunities and sense of community we provide for our members in such an important profession.”</p><p>Contact the member service team at +1.703.519.6200 or Hours of operation are Monday–Friday, 9 a.m. to 5 p.m. Eastern Time.​</p><h4>MEMBER GET A MEMBER </h4><p>It’s the last push before the final whistle blows on the first ASIS International Cup, the Society’s refreshed Member-Get-A-Member campaign, which provides friendly competition between members to see who can recruit the most members into the Society from May 1 to July 31. So far, dozens of members have taken to the field to compete for a variety of fun prizes and the ultimate bragging rights. It’s now the closing minutes of the game.</p><p>During this final month of the ASIS International Cup, new members can take advantage of half-year membership. This allows them to join ASIS at half the price of a standard full-year membership. Make sure you pass this along to colleagues who have not </p><p>yet joined—and let them know all the reasons you value your ASIS International membership.</p><p>Check out the current standings at​</p><h4>ASIS SPOTLIGHT ON SAFETY</h4><p>Each month on the ASIS website, Security Spotlight provides a suite of free resources that focus on a specific security challenge or industry trend. These resources are curated from the extensive references housed in the ASIS library, including council white papers, seminar education sessions, webinar recordings, book chapters, Security Management articles, and various other sources. </p><p>A full list of all topics can be found in the online Member Center (</p><p>In May the subject was Internet of Things (IoT) security and it included the 2016 webinar, Is your Refrigerator Spying on You and the ASIS 2016 Seminar session Addressing Cyber Risks to “Internet of Things” and Building Controls, as well as the 2017 Security Management article “Outdated Protocols and Practices Put the IoT Revolution at Risk” and guidance provided by the IT Security Council after the September 2016 Mirai Botnet Attacks. The topic in June was cybersecurity. </p><p>This month Security Spotlight focuses on school security, and it features a special new white paper from the ASIS School Safety and Security Council, School Bus Safety. The white paper is part of a series prepared by council members, including security professionals from colleges and universities, K-12 schools, and consultants. </p><p>School Bus Safety addresses various approaches to school bus safety and security issues, focusing on a proactive approach to protect children and others. The council notes, “the frequency of bus accidents appears to be increasing in [the United States].” However, “being prepared is the key to survival and saving lives.”</p><p>The paper is divided into seven sections, each providing unique perspectives on the issue. To set the scene, the first section covers the prevalence and circumstances surrounding school bus accidents. </p><p>The content that follows is a combination of practical tips and checklists for bus operators, research and examples of school bus incidents in the news, best practices, case studies, information on site assessment, links to other helpful information and security technology analyses.</p><p>In sum, the council white paper recognizes an international concern and identifies ways to move forward with patience, diligence, and research to defuse safety hazards on public and private school buses.</p><p><em>By Peggy O’Connor, ASIS director of communications.</em> <em>Contact her at Follow her on Twitter @pegoco.</em></p><h4>LIFE MEMBERS </h4><p>ASIS has granted two members Life Membership:</p><p>• Gayla Wick, CPP<br></p><p>• Roy J. Murphy, CPP</p><p>Life membership may be conferred upon one who has been a member for at least 20 consecutive years and is permanently retired from full-time security employment. The person must also have made a notable contribution to ASIS. Congratulations!​<br></p><h4>MEMBER BOOK REVIEW</h4><p><em>Practical Aviation Security: Predicting and Preventing Future Threats, Third Edition</em>. By Jeffrey C. Price and Jeffrey S. Forrest. Butterworth-Heinemann;; 598 pages; $99.95.</p><p>The third edition of <em>Practical Aviation Security: Predicting and Preventing Future Threats </em>is a well-researched reference for students learning aviation security and practitioners in the field. It provides the background necessary for those entering this complicated industry from any direction—a recent graduate, someone changing career paths, or a seasoned pro taking on additional responsibilities. It also assists in the preparation of instruction on unique airport security subjects for both entry-level and veteran airport workers.</p><p>Security within an aviation environment is complicated and highly regulated, with many areas of concern to ensure the safety of all involved. This publication explains the roles of government, airlines, and airports. Many aviation security laws, programs, and initiatives are reviewed, providing important fundamental knowledge for the reader.</p><p>The aviation industry is vital to the economies of our globe. It demands that security technologies and practices be current and collaboratively linked to ensure the safety of its users. This book highlights the industry’s history—recent and distant—identifying the discipline’s needs and the industry’s challenges through its review of security incidents. It uses case studies of aviation’s most deadly criminal and terrorist incidents, particularly those occurring during recent years. The risks and costs associated with insider threats, particularly radicalized citizen terrorists, are identified and portrayed as the most prevalent concern of aviation security professionals today.</p><p>Predicting and Preventing Future Threats may never be fully possible; however, studying the past and looking ahead at the challenges of the future will help current and future practitioners to prepare and confront those who wish to do harm. Because security is a responsibility shared by all, the industry’s leaders are advised to consult this book to assist in decisions that could impact the security of aviation.</p><p><em>Reviewer: Paul M. Mueller, CPP, is security manager for Manchester-Boston Regional Airport in Manchester, New Hampshire. He is an active member of the AAAE Transportation Security Services Committee and the ASIS Granite State Chapter.  </em></p>

asis News July 2017,-CPP.aspx2017-07-01T04:00:00ZCertification Profile: Malcolm Reid, CPP News June 2017,-CPP,-PSP.aspx2017-06-01T04:00:00ZCertification Profile: Anjali Sniadowski, CPP, PSP News May 2017 Profile: Nicholas G. Breiner's-Note---Symbiosis.aspx2017-04-01T04:00:00ZEditor's Note: Symbiosis,-CPP.aspx2017-04-01T04:00:00ZCertification Profile: Timothy McCreight, CPP News April 2017 News March 2017,-CPP,-PSP.aspx2017-03-01T05:00:00ZCertification Profile: Shawn Reilly, CPP, PSP News March 2017,-CPP,-PCI,-PSP.aspx2017-02-01T05:00:00ZCertification Profile: C. Joshua Villines, CPP, PCI, PSP Leads by Example News January 2017,-CPP,-PCI,-PSP.aspx2017-01-01T05:00:00ZCertification Profile: John C. Villines, CPP, PCI, PSP HQ Closed for the Holidays News December 2016,-PCI.aspx2016-12-01T05:00:00ZCertification Profile: Angela Osborne, PCI Staff Away for Thanksgiving Holiday

 You May Also Like... Century Security and CPTED: Designing for Critical Infrastructure Protection and Crime Prevention, Second Edition.<div class="body"> <p> <em> <span style="font-size:small;"> <span style="font-family:arial;">CRC Press. Available from ASIS, item #2078; 954 pages; $120 (ASIS member), $132 (nonmember). Also available as e-book.</span> </span> </em> </p> <p> <span style="font-size:small;"> <span style="font-family:arial;">As good as the first edition of 21st Century Security and CPTED was, this second edition surpasses it. Atlas, known in security circles as a consummate professional, has done an outstanding job in creating this second edition, which has twice as much material as the original edition. It also includes voluminous references and hundreds of outstanding clarifying photos in both color and black-and-white. Using humor and candid insight he incorporates all the concepts of CPTED, including design, construction, security countermeasures, and risk management strategies, and merges them into a highly informative reference manual for security practitioners at every level.</span> </span> </p> <p> <span style="font-size:small;"> <span style="font-family:arial;">There is a logical flow to the book. It lays a solid foundation by discussing architecture and its intent, as well as environmental crime control theories and premises liability. There is something here for everyone as it also discusses terrorism and critical infrastructure from differing perspectives. Several chapters on problem solving provide guidance on conducting threat, risk, and vulnerability assessments.</span> </span> </p> <p> <span style="font-size:small;"> <span style="font-family:arial;">Throughout, Atlas provides a roadmap for merging security and CPTED into management principles and practices in a wide variety of facility settings, including healthcare facilities, critical infrastructure, ATMs, office buildings, parking lots and structures, and parks and green spaces. The latter portion of the book is reserved for concepts including lighting, LEED and GREEN certification, workplace violence, signage, data capture and analysis, and conducting CPTED surveys.</span> </span> </p> <p> <span style="font-size:small;"> <span style="font-family:arial;">Atlas has created the definitive book on CPTED and security. Despite the magnitude and complexity of the science and art of security management, he has done an outstanding job of merging these and other disciplines and concepts together into a cogent display of information that the reader should be able to apply in a wide variety of locations and situations. If you are only going to buy one book this year, it is strongly suggested you purchase this one. </span> </span> </p> <hr /> <p> <span style="color:#800000;"> <strong> <span style="font-size:small;"> <span style="font-family:arial;">Reviewer:</span> </span> </strong> </span> <span style="font-size:small;"> <span style="font-family:arial;"> Glen Kitteringham, CPP, has worked in the security industry since 1990. He holds a master’s degree in security and crime risk management. He is president of Kitteringham Security Group Inc., which consults with companies around the globe. </span> </span> </p> </div>GP0|#28ae3eb9-d865-484b-ac9f-3dfacb4ce997;L0|#028ae3eb9-d865-484b-ac9f-3dfacb4ce997|Strategic Security;GTSet|#8accba12-4830-47cd-9299-2b34a4344465 Most Resilient Countries in the World<p>​Property loss prevention consultant FM Global released its <a href="" target="_blank">fifth annual <em>Resilience Index</em></a><em>,</em> which ranks 130 countries on their enterprise resilience to disruptive events. The ranking is data-driven and assesses categories such as economic factors, risk quality, and supply chain. It allows executives to plan supply chain and expansion strategies based on insight regarding risks and opportunities, according to the FM Global website. </p><p>Giving a nod to new trends that affect supply chain resilience, FM Global introduced three new drivers of resilience to its assessment: supply chain visibility, urbanization rate, and inherent cyber risk. Supply chain visibility addresses the ease of tracking goods across a country’s supply chain. “The more visible and robust the supply chain and the faster it can begin functioning as normal following a major local event, the greater its resilience,” the report notes.</p><p>The urbanization rate is based on the percentage of the country’s population that lives in urban areas. While urbanization is typically associated with a country’s development, it can prove to be risky in an area with high natural hazards. And rapid and unplanned urbanization can create pressure on utilities and infrastructure, which can be a significant threat to the country’s resilience, according to the report.</p><p>2017 is also the first year that the threat of cyberattacks has been acknowledged in the report. The inherent cyber risk driver is defined as “a blend of a country’s vulnerability to cyberattack, combined equally with the country’s ability to recover.” This is calculated by determining the percentage of citizens with access to the Internet, as well as how the government responds to cyberattacks. “Countries that recover well from major events are those with a thriving industry in malware or cybersecurity, and where governments are willing to step in and help citizens in the event of a nationwide hacking,” the report says.</p><p>At the top of the list for the fifth year is Switzerland, an “acknowledged area of stability for generations” with infrastructure and political stability that makes its supply chain reliable and resilient. However, natural disasters and cyberattacks remain a threat to the country. </p><p>Also notable is Luxembourg, which was ranked eighth in 2013 but placed second this year. A growth in the country’s services sector, combined with its reduced economic reliance on oil and its business-friendly regulations, makes Luxembourg a safe place to expand operations to, the report finds. And due to its location, Luxembourg may serve as a new home for companies following the United Kingdom’s departure from the European Union.</p><p>At the other end of the spectrum, Haiti is ranked last due to its lack of supply chain and standards and its high rate of poverty. Similarly, Venezuela fared poorly due to corruption, natural disasters, poor infrastructure, and ill-perceived quality of local suppliers.  ​</p>GP0|#28ae3eb9-d865-484b-ac9f-3dfacb4ce997;L0|#028ae3eb9-d865-484b-ac9f-3dfacb4ce997|Strategic Security;GTSet|#8accba12-4830-47cd-9299-2b34a4344465,-CPP,-PCI,-PSP.aspxCertification Profile: C. Joshua Villines, CPP, PCI, PSP<p>​C. Joshua Villines, CPP, PCI, PSP, admits that his expertise in security originated with his family. When he was 15, he began working at the investigative and security agency owned by his father, John C. Villines, also a triple certificant. (The elder Villines was profiled in January’s Security Management.) After holding every position from clerical assistant to field supervisor in that firm, Villines trained as an interrogator in the U.S. Army, specializing in Russian and counterintelligence.</p><p>In April 2011, Villines became the executive director of the Human Intelligence Group. “Watching my dad train, mentor, challenge, and lead by example gave me a master class on what security management looks like at its best,” he says. In his current position, Villines oversees certified instructors who provide training to law enforcement and private agencies. </p><p>“The dynamic nature of threats requires that we stay current on the latest crime prevention and counterterrorist research, standards, and published guidelines,” he says. Efforts to reinforce his proficiency in these competencies motivated Villines to pursue all three ASIS board certifications. Also, “there might have been some good-natured rivalry with my dad,” he admits. The elder Villines had been a Certified Protection Professional® (CPP) for a decade before Joshua Villines achieved that goal in 2013. “I edged him out by earning the PCI [Professional Certified Investigator®] a few months before he did in 2015,” he says, and both had earned the Physical Security Professional® (PSP) by 2016. This year, Joshua Villines begins a three-year term on the ASIS Professional Certification Board.</p><p>When preparing for the exams, Villines encourages others to integrate the study materials with their current job requirements. He fosters this concept within his own agency. “Any staff member who meets the criteria for board certification is eligible for reimbursement for the cost of the certification as well as one ASIS review course,” he explains. </p><p>In addition to his certifications, Villines holds master’s degrees from Mercer University and Vanderbilt University. He also completed more than 40 hours of law enforcement firearms instructor training in 2016. Part of his agency’s mandate is tailoring curriculum that originates in the military and law enforcement communities to the demands of private and institutional organizations. “I particularly enjoy working with faculty in an educational setting to integrate safety in ways that foster rather than inhibit good teaching,” he says. In one K-12 system, an inspirational teacher  gave students room to examine and question personal and school safety issues, says Villines. As a result, he continues, “the students viewed safety as a source of confidence, not fear.”</p><p>Villines believes that security management as a career integrates a range of skills, “from the core competencies that any manager must have to the ability to respond quickly and calmly to crises where lives hang in the balance.” He says that his ASIS membership has given him access to the best published standards and guidelines in the field as well as to cutting-edge education. “ASIS has allowed me to tap into a large network of subject matter experts whose collegiality and support makes my work possible,” he says. “My favorite thing about my job is knowing that the work we do makes people safer.”</p><p>--<br></p><p><em>Profile by Mary Alice Davidson, Principal, Davidson Communications.</em></p>GP0|#28ae3eb9-d865-484b-ac9f-3dfacb4ce997;L0|#028ae3eb9-d865-484b-ac9f-3dfacb4ce997|Strategic Security;GTSet|#8accba12-4830-47cd-9299-2b34a4344465