New Zealand Security - June-July 2021 by Defsec New Zealand

June/July 2021

New Zealand Security Magazine

CCTV AND PERIMETER PROTECTION New Hastings office for HSM

Protection from spiked Weapons

No time to normalise leaks

CEO Matt Stevenson talks to NZSM about attracting and retaining staff and creating a workplace culture and environment to be proud of.

PPSS’ Robert Kaiser warns stab resistant body armour doesn’t necessarily protect the wearer from spiked or doubleedged weapons.

With cyberattacks every 11 seconds, Andrea Babbs writes this is no time to be accepting breaches as normal.

www.defsec.net.nz

NZ made

SECURITY TECHNOLOGY RELIABILITY

fire door holding

electromagnets 12 & 24 VDC selectable

rea

unb

le b a k

FDH40S

unbreakable universal mounting • Low power consumption - low operating temperature • One product suits floor and wall mounting • Universal armature - offsets to 55º to suit doors opening past 90º • Wall mount extensions available • 12 & 24 VDC selectable • Push off button with no residual magnetism • Oversize armature for easy alignment • Emergency release button • Electroless nickel plated armature and electromagnet • Stainless fastenings • Full local support and back up

10 YEAR GUARANTEE*

Standard, floor mounted, wall to door distance 114mm

Designed, tested and produced in New Zealand to AS4178 A) Wall mounted,126mm extn. tube (overall 202mm) B) Wall mounted, 156mm extn. tube (overall 232mm) C) Wall mounted, 355mm extn. tube (overall 431mm) B)

TEE

Option A – Surface Mounted

AN GUAR

FDH40S/R

Surface and Recess mounting This device enhances an outstanding range of unbreakable products which conveniently hold open fire doors. When a smoke/fire alarm is activated the magnet instantly releases the door to the closed position to prevent the spread of smoke and fire. These units feature a choice of 3 covers for optimum aesthetic appeal and durability. The installer can utilise one device for surface mounting or for recess mounting. Option B – Recess Mounted

10 YEAR GUARANTEE*

Satin Aluminium

Gloss Black

Gloss White

Loktronic Limited Unit 7 19 Edwin Street Mt Eden Auckland P O Box 8329 Symonds Street Auckland 1150 New Zealand Ph 64 9 623 3919 Fax 64 9 623 3881 0800 FOR LOK mail@loktronic.co.nz www.loktronic.co.nz

For expert advice and assistance with your security locking needs, trust in Loktronic, call us on 0800 367 565

GUARANTEE

*Standard terms & conditions of sale apply.

21556/1/18

eCLIQ - Rethink the Key Schools, museums, leisure centres, and commercial buildings all have the challenge of maintaining multiple security touchpoints. Now, with eCLIQ access management is so much easier. eCLIQ is uncomplicated and reliable, without compromising on security. Each key is individually programmable, offering; password protection, authentication and audit trails – all with the peace of mind, that access rights can easily be revoked. With its extensive range of different cylinder types, the eCLIQ system is designed for every kind of use, from the company entrance gate, to securing the alarm systems, lift doors and cabinets.

Cylinders are easy and quick to install, no cabling is needed.

New, future-proof CLIQ ® chip generation with AES encryption and rapid processing speed with efficient energy management.

More durable, more secure and more efficient than conventional locking systems

www.assaabloy.co.nz

CONTENTS ISSN Print 1175-2149 • ISSN Online 2537-8937

From the editor ................................................................................................................................................................................................................................................. 6 Question and Answer time – DSC PowerSeries Neo................................................................................................................................................................... 8 Boost security at remote locations with Hikvision’s solar-powered stand-alone security solutions............................................................10 Engaging youth to help solve the security skills shortage....................................................................................................................................................14 Perimeter Security: A business’ first line of defence...................................................................................................................................................................16 Manufacturing plant consolidates all keys.......................................................................................................................................................................................18 HSM new Hastings office a bold statement...................................................................................................................................................................................20 Spiked Weapons: Are you protected?.................................................................................................................................................................................................22 Video Intercoms – Tips for a hassle-free installation..................................................................................................................................................................24 Staying focused on training takes perseverance.........................................................................................................................................................................26 What the private sector can learn from militaries about the convergence of cyber and physical threats...............................................28 74% of CISOs would pay a premium to work with thought leaders................................................................................................................................30 Normalising data leaks: A dangerous step in the wrong direction...................................................................................................................................32 Government takes action against gang crime..............................................................................................................................................................................34 NZSA CEO’s May Report..............................................................................................................................................................................................................................36 Three markets that can benefit from smart surveillance........................................................................................................................................................40 Cato Networks Report: 20-year old exploits and TikTok flows threaten enterprise security.............................................................................42 Atlas Gentech showcases and celebrates partners....................................................................................................................................................................44 Eden Park joins vGRID SaferCities network......................................................................................................................................................................................46

Industry Associations

* www.security.org.nz

www.asis.org.nz

www.masterlocksmiths.com.au

Three leading brands from

0800 367 565 www.loktronic.co.nz

NZSM

www.skills.org.nz

www.nzipi.org.nz

June/July 2021

i-PRO X SERIES powered by AI

Taking intelligent analytics on the network edge » Maximising network and bandwidth efficiencies » Installs up to three video analytics applications » Designed for third party application development » High endurance, high realiability even in extreme conditions » Five year warranty

AI Privacy Masking Available models: WV-X2571LN 4K outdoor dome camera WV-X2271L 4K indoor dome camera WV-X1571LN 4K box camera

WV-X2551LN 5MP outdoor dome camera WV-X2251L 5MP indoor dome camera WV-X1551LN 5MP box camera

business.panasonic.nz/security-solutions/

FROM THE EDITOR Welcome to the June-July 2021 issue of New Zealand Security Magazine! In this issue we focus on CCTV, alarms and perimeter protection. Distributor Hills answers the top 10 questions that installers are hearing from their customers in relation to the DSC PowerSeries Neo. Does DSC have a mobile phone app? What is the range on a DSC NEO Wireless Device? The answers to these questions and more are inside! Writing for ASIS International’s Security Management magazine, Alexander Harlass explores three markets that can benefit from smart surveillance, including agriculture, industrial controls and manufacturing and logistics. Traditionally it’s been difficult for remote operations to protect their people and assets – especially where no power supply or fixed networks are available. That was before Hikvision’s solar-powered stand-alone security solutions came along. We take a look at this impressive suite. Controlling and monitoring access to sites that have a mix of office buildings, factories, gates and storage sheds requiring multiple sets of keys can get tricky in terms of key management. We explore how the new eCLIQ access control system from ASSA ABLOY provides a solution in a single key type and an online management platform. We also get the low down on installing the Dahua Video Intercom line up in multi-dwelling property applications – from new system set-up to mounting and technology for larger installs. In cyber security, we feature several insightful articles, including a report on recent research by Cato Networks that finds that the most prevalent enterprise cybersecurity risks in Q1 came from unpatched legacy systems, attacks from the US (not China or Russia!), and consumer applications such as Tik Tok. New research predicts there will be a cyberattack every 11 seconds in 2021. However, this doesn’t mean that it should be normalised, writes VIPRE SafeSend’s Andrea Babbs, who argues against what she sees is a prevailing trend of cyber complacency. Some great updates as well from within the industry, including a report from NZSA CEO Gary Morrison, coverage of Atlas Gentech’s recent Enterprise Integrated Solutions Event and Inner Range Partner Awards, and news from FLIR and Advanced Security. There’s plenty more in this June-July issue of NZSM! To ensure you don’t miss out on any of the news and analysis we publish, subscribe to our email newsletters via our website, and follow us on LinkedIn via the address listed on this page. As always, feel free to get in touch to find out about how your business can benefit by being part of New Zealand’s premier security and risk management industry publication in 2021-22! Nicholas Dynon Auckland

DEFSEC

New Zealand’s National Defence, Fire and Security Publishers of: Line of Defence, FireNZ, New Zealand Security Magazine

Contact Details: Chief Editor, Nick Dynon Phone: + 64 (0) 223 663 691 Email: nick@defsec.net.nz Publisher, Craig Flint Phone: + 64 (0)274 597 621 Email: craig@defsec.net.nz Postal and delivery address: 27 West Crescent, Te Puru 3575, Thames, RD5, New Zealand

NZSM

Upcoming Issue August / September 21 Building, Construction, Facilities Integration Consultants, Electricians, CCTV Installers, Architects, Engineers, Intergrators & Estimators facebook.com/defsecmedia twitter.com/DefsecNZ linkedin.com/company/ defsec-media-limited

NZSM New Zealand Security Magazine

Nick Dynon Chief Editor Nick has written for NZSM since 2013. He writes on all things security, but is particularly fascinated with the fault lines between security and privacy, and between individual, enterprise and national security. Prior to NZSM he clocked up over 20 years experience in various border security and military roles. Disclaimer: The information contained in this publication is given in good faith and has been derived from sources believed to be reliable and accurate. However, neither the publishers nor any person involved in the preparation of this publication accept any form of liability whatsoever for its contents including advertisements, editorials, opinions, advice or information or for any consequences from its use. Copyright: No article or part thereof may be reproduced without prior consent of the publisher.

June/July 2021

Due to ticket availability the opportunity to win tickets will now be for The Rugby Championship!

THE

U LT I M AT E C U P EXPERIENCE WITH 3 BUDDIES

Win 4 tickets to the final game of The Rugby Championship at Eden Park on the 2nd October!

ACKS ALL BLS V BOKS SPRING

WATCH US WIN WITH THREE OF YOUR MATES ULTIMATE PACKAGE INCLUDES: • Pre and post-match corporate hospitality service • Reserved category A or B match tickets • Four course seated meal • Premium beverage service prematch and post match • Master of Ceremonies, guest speakers and entertainment • Match day programme - 1 per 2 guests

TICKETS WORTH OVER

$4K

To win, spend over $1,000* at Hills New Zealand on DSC products to be eligible. Competition runs from 1st June to 23rd September, 2021

210513 DSC NZSM v9

• Host service

For more information on DSC and other best-in-class solutions 08001 HILLS (44557) or hills.co.nz Follow us on

Hills Limited NZ

YO U C A N R E LY O N H I L L S Terms and Conditions: Every Hills NZ Limited (“Hills NZ”) customer resident in New Zealand and who spends a minimum of $1,000 excluding GST on DSC products on a single invoice through the promotion period from Hills NZ, will receive one (1) entry in the prize draw to win four tickets including hospitality to The Rugby Championship held at Eden Park on the 2nd October 2021. The prize is valued at $4,249 including GST (RRP). Win the Ultimate Cup Experience runs between 1 June, 2021 and 23 September, 2021 inclusive (“promotion period”). The winner will be drawn on Friday 24 September 2021, at Hills NZ head office in Auckland NZ. The winner will be notified by phone and published online at Hills.co.nz. If tickets are unavailable, Hills NZ reserves the right to substitute with a prize of equal value. Hills NZ reserves the right to change these terms at any time by notice on its website. Please visit the website www.hills.co.nz/rugbycompetition-dsc for full competition details, terms and conditions.

PRODUCT FEATURE

Question and Answer time – DSC PowerSeries Neo New products and product enhancements are introduced into market at a rapid rate these days and you could be forgiven if you are not always able to keep up. The trouble is that a gap in your knowledge base can make answering client questions tricky.

2. Do I have to pay anything for the app? No, once you have added a compatible communicator to your DSC Neo panel (we recommend the IP TL280 module) and connect it to the internet, the app is free to download.

At Hills we believe in the importance of providing technical support and training for all our products. We understand that sometimes it is the questions you’ve not encountered yet that can leave you high and dry, so we’ve put together the top 10 questions that our installers are telling us that they are hearing from their customers, in the hope that you will be more prepared for those important question. In this issue and with the recent release of the new DSC mobile apps we thought it would be a great time to share the questions and answers our installers are asked by their customers. 1. Does DSC have a mobile phone app? Yes, the DSC NEO series has a free app. The new ConnectAlarm app replaces the old Neo GO app and provides user functions such as setting and un-setting the alarm, receiving activation notifications, checking the system status and reviewing event history, all from a single easy to use app.

3. I have received a notification that my subscription is about to end. Do I need to pay to continue my subscription? No, there are no extra costs behind the DSC app. If you receive this notification, log into your Connect Alarm App and then log out, this will renew your subscription. 4. How many people can use the app on my Alarm panel? The number of users is based on the model of system you have. The HS2016 supports 48 users, the HS2032 supports 72 users and the HS2064 & HS2128 panels support 95. 5. Can I remotely program my customers panel? Yes, the DSC Neo has a tech application called AlarmInstall. With this app (and the customers permission via their Connect Alarm App) you as an installer can log into and program changes to the system or if there is a

NZSM

June/July 2021

zone that is false activating you can deactivate the zone and then arrange a time to go to the customers premises to investigate and fix the fault. The AlarmInstall app also lets you save up to 8 different configurations per panel making it easy to revert back changes quickly.

6. Can my alarm tell me I’ve forgotten to arm my system? Yes, in the latest firmware DSC has introduced a new feature called Geo Fencing. Geo Fencing lets you set an invisible perimeter around your house, if you leave this area with your phone and have not armed the system it will notify you and ask would you like to arm your system. 7. What is the range on a DSC NEO Wireless Device? DSC Neo Wireless Devices have a range of up to 1km, line of sight. While the Power G wireless system use in DSC Neo Wireless devices is industry leading, it is important to remember that certain building materials can reduce the effective range of any wireless device. A PG4920 Wireless Power G Repeater can help boost signals in areas of poor coverage.

8. Does a Wireless key/remote have the same range? Wireless keys or remotes have a 30 meter range. While this may seem counterintuitive, there is actually a very good June/July 2021

reason for this; limiting the range of remotes and keys reduces the likelihood of accidentally disarming the system when you’re offsite.

9. How long will the batteries last in my wireless devices? DSC Wireless devices are integrated with energy saving technology, Power G wireless products feature a unique power saving technology. Each device continuously measures communication quality and automatically sets its transmission power to the minimum required for reliable communication with the panel. This ensures minimum, short transmissions while greatly extending the battery life of Power G devices to last up to 8 years! 10. I have relatives staying is there an easier way for them to arm and disarm the system than remembering a code? Yes, the DSC Neo panels have the ability to arm and disarm via proximity tag removing the need to remember a code. Simply present the MPT Mini Prox Tag to a DSC Neo keypad with optional Prox Support (e.g HS2LCDRFP) to arm or disarm your intrusion system.

Hills NZ is a premium DSC distributor and have a wide range of products and bundles to help you install a robust DSC system. If you would like to learn more about the DSC PowerSeries Neo and its apps, Hills offers hands on classroom training every month. Bookings are essential so please visit our training portal, https://hillstraining.hills. com.au or talk to your local Hills representative to find out when we are next training in your area. To see the full Hills range of DSC intrusion products, visit www.hills.co.nz/dscpsneo today. NZSM

SOLUTION

Boost security at remote locations with Hikvision’s solar-powered stand-alone security solutions Until now, it has been difficult for remote sites and operations to protect their people and assets – especially where no power supply or fixed networks are available. Now, there’s a simple, practical, cost-effective solution to this challenge in the form of Hikvision’s Solarpowered Security Camera Setup. The challenge of protecting remote and rural sites All kinds of remote and rural sites require constant security monitoring, from farms and fisheries, to forestry operations, oil and gas pipelines, and even national parks. The problem is that these kinds of sites are frequently ‘offgrid’, lacking the power and fixed network connectivity needed to deploy security monitoring cameras. As an additional challenge, many sites have only temporary security requirements, making the cost of deploying ‘fixed’ cameras prohibitive. This is the case for open air music festivals, political rallies, and many other events. A range of other sites and operations also have short-term monitoring needs, from construction sites to temporary road maintenance works. Meeting security requirements at these kinds of remote and temporary sites requires a new kind of ‘standalone’ solution: one that can operate independently, without physical connections to either the energy grid or to a fixed network. Additionally, standalone solutions should be fast and simple to deploy, highly durable to withstand the most adverse weather conditions, and affordable enough to meet the needs of all kinds of remote sites and operations.

NZSM

Boosting security with Hikvision’s Solar-powered Standalone solution To help remote operations to boost their security, Hikvision has created the Solar-powered Security Camera Setup. This solution uses a 40 Watt photovoltaic panel and a highly durable 20 Ah rechargeable Lithium battery to power a Hikvision EXIR Fixed Bullet Solar Power 4G Network Camera. Because the Solar-powered Security Camera Setup uses solar power and includes a Micro SIM card for connectivity with the 4G network, there is no need for fixed power or network cables on site. Additionally, operators can monitor, review, and store footage remotely, 24 hours a day, 365 days a year. Key benefits for remote sites and operations Using the Hikvision solution, remote sites and operations can boost their security quickly, easily, and at low cost. With no need for a fixed network or power supply, and simple installation that can be carried out by just one person, the solution can be rolled out in hours – with very little need for ongoing maintenance or support.

June/July 2021

Solar Powered 4G Standalone Solution Designed for rapid deployment or applications where power and ethernet are not available, this standalone security station provides the link for video where it was not once possible without complex solar and generator backed solutions. Providing 24/7 monitoring of remote critical infrastructure, the environment, construction and outdoor events the Solar Security Station provides video through to your video management device.

2 MP

@ 30 fps

Beaufort scale

40 W

DS-2XS6A25G0-I/CH20S40

IP66

20 Ah lithium

· Extended battery life – Up to 7 days

of continuous operation without sunlight · Smart power management and battery protection · Wind-resistant and waterproof design · Easy installation with a net weight of 14 kg

Distributed by Australia

Hikvision Oceania

New Zealand

www.hikvision.com.au Hotline +64 9 217 3127 sales.nz@hikvision.com www.csd.com.au

www.nesscorporation.com www.videosecurityproducts.com.au www.atlasgentech.co.nz

www.nfs.co.nz

Scan to know more

Hikvision Oceania

Key benefits include: High-quality imaging for fast, effective incident responses The Hikvision EXIR 4G Network Camera provided with the Solar-powered Security Camera Setup offers high resolution imaging (1920 x 1080 pixels @ 30 fps). Additionally, the camera provides very clear images even where strong back-light exists due to Hikvision’s 120 dB true Wide Dynamic Range (WDR) technology. The excellent quality and clarity of video imaging means that operators can quickly identify and react to security incidents at remote sites – helping to reduce negative business impacts.

Key features of the Hikvision Solarpowered Security Camera Setup • High quality imaging with 2 MP (1920 x 1080 @30 fps) resolution • Clear imaging against strong back light with 120 dB true WDR technology • Ah rechargeable lithium battery with 7-day operation even in cloudy and rainy weather • 40-Watt photovoltaic panel for standalone operation • Support battery management features, including battery display • Battery high/low temperature protection and charge/discharge protection, with low-battery sleep protection and remote wakeup features • 4G Micro SIM card with LTE-TDD/LTE-FDD/ WCDMA/GSM transmission capabilities • Water and dust resistant camera (IP67 certified) 12

NZSM

24x7 security monitoring – in any weather The product employs BMS (battery management system) in its 20Ah Lithium battery, which ensures the optimal use of the battery energy. With its smart power management features, the Solar-powered Security Camera Setup provides up to 7 days of operation during cloudy or rainy periods when fully charged. Its 4G camera further adds a 32GB eMMC (embedded MultiMediaCard) besides the SD card, this ensures continuous video recording when there is an anomaly with the SD card or the network environment. Additionally, the self-sufficient unit is waterproof (accredited to the IP67 standard), and windproof (with a hurricane rating of 12). All this means that operators can continue monitoring and securing their remote sites without interruptions – even in the harshest and most challenging weather conditions. Rapid, simple, cost-effective installation A single person can install the solution at remote sites, making the process fast, easy, and cost-effective, thanks to its lightweight design. The pole mounted unit weighs just 14 kg, and there are no complex cables to connect – further reducing deployment time and complexity. This speed and ease of deployment significantly lowers barriers for remote sites and operations looking to boost their security. It is also a major reason why it is the ideal choice for temporary sites such as construction sites and road maintenance sites. To discover the power of the Hikvision Solar-powered Security Camera Setup for remote site and operations monitoring, please visit: https://www.hikvision.com/en/ products/IP-Products/Network-Cameras/standalonesecurity-site-/?category=Network+Products&subCategory= Network+Cameras&series=Standalone+Security+Site+&ch eckedSubSeries=NONE. June/July 2021

INDUSTRY

Engaging youth to help solve the security skills shortage Amid an industry-wide skills shortage, Gallagher gets on the road with the New Zealand Security Association to promote security as a career option to secondary school students.

The New Zealand Security Association (NZSA), with support from Gallagher, is now on a mission to raise awareness for security as a career pathway and ultimately remove the skills shortage. NZSA is using a funding grant from the Ministry of Education to run security career events at 10 lower decile secondary schools throughout the country. The visits are coordinated with school career advisors and people from the industry attend and share their career experience. “The engagement so far has been fantastic, with many students indicating they would certainly consider security as a viable career option after school,” says Gary Morrison, NZSA CEO. Last week, Gallagher’s High Security and Technical Manager Kyle Roe attended two events at Wellington schools – Rongotai College and Aotea College. “The students were definitely an engaged bunch,” said Kyle. “Special mention has to go to NZSA’s virtual reality training platform, which attracted the most interest. Personally, I had never seen VR used in an educational context, so it’s exciting that it could result in more enthusiastic trainees for the physical security industry.” According to Kyle, meaningful career guidance was in short supply when he attended school. “I didn’t have any idea what a security technician was or what they did. The direction in my day was either go to uni and study something that interests you or do a trade where the only options were 14

NZSM

Gallagher’s Kyle Roe outside Aotea College

plumbing, electrical, or building. “The reality is that vocational pathways for students are enormous. The career paths within electronic security alone are a great example of this. You could be a senior technician, engineer, project manager, or operations manager, all within a few years of starting out.” When asked what words of wisdom he shared with today’s youth, Kyle said: “Firstly, where you start out is not where you’ll end up. I started my career working in car parks, and now I am working with organisations that are critical to New Zealand’s success and the safety of its people. “Secondly, take every opportunity that presents itself. I have worked for four different companies in 12 years and fulfilled dozens of roles within each. Every change has been for the better. “Anything that runs on electricity needs a person to install, maintain and fix it. You could work on alarm

systems that protect classified documents, audio visual systems for concerts, control systems for manufacturing robots, navigation systems on boats – all with roughly the same skill sets. The possibilities within the industry are endless.” Brad Small, Gallagher’s Regional Sales Manager for New Zealand & Pacific Islands noted that Technical BDM, Rick Spencer, had also starred at an event at Rotorua Lakes High School last month. “The feedback was that Rick put on a great show for the kids, taking along the Command Centre demo and Pulse Fence demo cases for them to explore, and sharing some inspiration from his career to-date. “Like much of the industrialised world, New Zealand’s workforce is ageing. Great talent and experience will be retiring in the not-toodistant future, so we need to bring in young blood and fill the void with new ways of thinking and go-getter attitudes.” June/July 2021

PERIMETER

Perimeter Security: A business’ first line of defence Do cameras do enough to deter property crime? Dave Solly, Gallagher’s Product Manager for Perimeter Security, writes that perimeter security is a business’ first and best line of defence. During these challenging times, more businesses face incidents of burglary, theft, and other related crimes, making the need to deter and detect intruders greater than ever. The ramifications of unprotected sites, assets, and people can be disastrous and have significant financial implications for businesses. According to research published by New Zealand Police, summarising the total crime victimisations recorded by police for 2020, 73 percent of the 265,162 victimisations were crimes against property (theft and related offences, and burglary). Burglary itself made up 58,704 of these victimisations, and while 7 out of 10 were residential, 15,576 were commercial burglaries.

Gallagher’s Product Manager for Perimeter Security, Dave Solly

NZSM

We have heard from customers around the globe that burglary is one of their biggest challenges, and many share a common experience – while the cameras they installed might provide an excellent audit trail, the technology does not deter an attack from happening. Common conversation Commonly, while business owners install chain link fences and CCTV, neither of these measures provided enough or even any deterrence. Placing flattened cardboard boxes over the strands of barbed wire topping, pulling their hoodie up over their face, or wearing a balaclava often means a fence and CCTV are no match for intruders. Unfortunately, this is a scenario we hear all too frequently from our customers. With break-ins increasingly commonplace, it is essential that businesses efficiently secure their commercial premises. While a fence, in most cases, depending on the structure, can deter and delay intruders from gaining access to a property, it does not help detect intruders unless the fence has detection-based technology installed, such as an energised fence. And whilst CCTV can be used to detect intruders, for true detection, you need someone actively watching the CCTV. Unless the cameras are monitored, the value of deterrent they provide is limited as well. `An effective security solution has three key factors: prevention, detection, and management. If installed correctly, these three factors should enable you to deter, detect and delay. That’s where an energised fence is the best in the market. First line of defence Perimeter security is a business’ first, and best, line of defence, with energised fences offering powerful deterrence, detection, and delay. Gallagher’s intelligent monitored pulse fence solution includes disturbance and tension sensors that detect vibration or changes in wire June/July 2021

tensioning. These innovative fence-line devices generate alarms when a disturbance meets a predefined threshold, providing quick intrusion detection and response times without the intruder becoming aware. Experience is everything AT Brown (Coaches) Ltd, a premier coach company in Shropshire, England, is a great example of how perimeter fencing provided effective protection for their business. Despite having CCTV cameras and employing mobile patrols, thieves continued breaking through the standard security fence and syphoning fuel out of the coaches over a period of eight years. In addition to the cost of the stolen diesel, vehicles and fences were damaged, and services were delayed with drivers having to source fuel elsewhere. “Thieves were coming through the security fence and syphoning fuel out of the coaches. The investment in CCTV cameras and mobile patrols wasn’t paying off,” said AT Brown owner, Ewen MacLeod. Since installing a Gallagher monitored pulse fence around the whole site, there have been no attempted break-ins, saving the company thousands of pounds in June/July 2021

loss and damage. The fence provides a powerful visual and practical deterrent to would-be thieves and can be armed or disarmed through the building alarm panel or a keypad. Any detected intrusions will be notified direct to a phone, through the building alarm system. Integration is key We’re seeing more and more businesses prioritise physical perimeter protection. While safe, people are inherently afraid of an electric shock, so monitored pulse fencing has proven to be the best intruder deterrent a business can choose for their perimeter. While intrusion detection starts at the fence line, integration with other security technologies is key to any effective security system. Video cameras are a very important part of your security solution, and if constantly monitored, can detect an intruder before they get on site. But often, they are more useful after an incident has occurred to assist with evidence gathering. While CCTV plays an important role in perimeter protection, cameras on their own are not enough. NZSM

CASE STUDY

Manufacturing plant consolidates all keys Meeting the challenge of building access control, eCLIQ gives Pacific Door Systems transparency, security and ease of use. Customer Pacific Doors are part of the ASSA ABLOY Group and specialise in the bespoke manufacture of high-performance door and window systems for fire, acoustic, security, hospital, mental health, ballistic and commercial purposes. They have manufacturing facilities in Lower Hutt and Timaru, employing around 75 people.

Challenge The issue was in controlling and monitoring access to sites which have a mix of office buildings, factories, gates and storage sheds, requiring multiple sets of keys. Managing these keys was time-consuming and did not provide the security or visibility the company needed across their offices and factories. Solution The new eCLIQ access control system from ASSA ABLOY has provided the solution in a single key type and an online management platform. Pacific Doors now have a master key for every type of lock and padlock on site. Controlling access in both single- and multi-tenant premises means allowing people to go where they need to, while at the same time ensuring these areas remain 18

NZSM

secure. The eCLIQ system combines the traditional elements of lock and key with powerful electronic access and monitoring technology. This allows total control over who can enter any specific area at any given time, up to the minute, even from remote locations. ‘You can control every element – who has access, where they have access to, and when they can access it,’ says Michael Pearson, director of the ASSA ABLOY Door Group. ‘For example, a manufacturing team might operate overtime or on weekends. eCLIQ lets us give them access to the spaces they need to be in while other areas stay secure.’

Familiar form, new technology It may be surprising that one of the most sophisticated, up-to-date access and security devices looks, at first glance, like one of the oldest. Based on the traditional lock and key, eCLIQ retrofits seamlessly into existing locking systems; cylinders are made to the same dimensions, and all electronics are self-contained, powered by a battery within the key. Says Pearson, ’We chose eCLIQ over others because we didn’t have to change much at all – you just replace the cylinder within the existing locks. Because the key provides the battery power, you get electronic locks without having to bring power to every door.’ June/July 2021

Delivering a cost-effective solution that provides access control without the need for wiring is a great advantage of the eCLIQ system, based as it is on electronics that are embedded directly inside the key and the core of a cylinder. Within each key and cylinder is a unique electronic code, which is designated for one individual element only and cannot be altered or corrupted. Making installation simple The unique code for each key-set means access can be centrally controlled and monitored using either CLIQ Go, a secure website, or the more sophisticated CLIQ Web Manager, an enterprise full-feature software suitable for all types of systems. For Pacific Doors, ease of use and installation were primary factors in choosing eCLIQ. ‘It took a few hours to swap out all our locks – undo one screw to remove the old cylinder, place the new cylinder and screw it up again in 10 minutes per door – compared with other products, where you would need multiple people for multiple days.’

A smart system Once installed, the system offers great flexibility in operation. Any eCLIQ key can be programmed to be always active, active between certain dates and times, or inactive. It is also possible to set a weekly operation schedule. Cylinder-specific time periods can be programmed for a key; for example, a key can be programmed to open all cylinders Monday to Friday except for one or more cylinders that can be opened only on Saturdays. Again, the simplicity of the system makes it so smart. ‘The ASSA ABLOY rep showed us how to programme the keys,’ says Pearson. ‘Half an hour training and then our team did the rest. And it’s easy to manage. Now we have better visibility for external contractors and security guards. When we had critical machinery serviced after hours recently, we gave the contractor key access for a specific time period. So it helps us control security and access to remove security risks we faced previously, and means less after-hours on-site attendance by our team.’ For information about eCLIQ™ visit www.assaabloy.co.nz

June/July 2021

NZSM

HSM new Hastings office a bold statement As Hawkes Bay’s HSM moves into brand new premises, CEO Matt Stevenson talks to NZSM about attracting and retaining staff and creating a workplace culture and environment to be proud of. Last year, Hawkes Bay-based security provider HSM made a decision to invest in its future, its local community, and its staff, by proceeding with ambitious expansion plans that included a move to refurbished new premises. Double the size of its previous facilities, the new office consolidates two previous premises into a 800 sqm footprint on the one new site. Totally refurbished, the new office has been fit out to meet the needs of the growing business and its multidisciplined teams. “The driving force behind this move was the desire to have an awesome place for staff to work and to bring the whole team together under one roof,” CEO Matt Stevenson told NZSM.

HSM CEO Matt Stevenson

NZSM

“We have a new state of the art monitoring station and modern new facilities including the latest in office furniture and facilities, new break out areas for staff with soundproofed zones for meetings, locker and shower areas for our guards, new training facilities and a great new kitchen area with an outdoor space, all helping our staff have a great place to work.” It’s part of a plan to attract more high quality staff to Hastings as the nationwide part of HSM’s business takes off. “We’ve got a new management team with the aggressive goal of doubling our turnover in two and a half years,” said Matt. It’s also a far cry from HSM’s humble beginnings. Back in 1997, the

company, founded by Matt’s father Fred Stevenson, was just three staff operating out of a converted packing shed. In 2000, the company moved into its first monitoring station premises. Seven years later it opened a purposebuilt facility, and eventually it opened a second office due to continued growth. A workplace to be proud of “From a business perspective we often talk about culture and what a great place it is to work, but we actually went that extra step further and created an awesome place,” said Matt. “We went out and had a look at what other sharp businesses were doing around work culture June/July 2021

and environment. We selected characteristics that we felt were a good fit for us, and we aimed to create that same atmosphere and same cutting edge.” “Our cafeteria is a great example of this. In the past, our staff would go and have a coffee or lunch somewhere else, whereas now – with an inviting interior, fresh fruit delivered daily and good coffee – we’re actually sitting down together. It’s just changed that communication factor across the board for us.” According to Matt, the new workspace is an important element in providing a compelling proposition to employees beyond the attraction of good wages alone. “Our biggest problem is attracting staff. In the electronic side of the industry in particular, employers have just been paying more – buying people in and offering them more money, more money, more money

June/July 2021

– and that doesn’t tick the box for everybody. There are other boxes that need ticking as well.” Feedback from staff in relation to their new office environment has unsurprisingly been positive. “They’re proud – they’ve been bringing in customers to show them around the building – they’ve been bringing in family!” Attracting scarce talent HSM’s current workforce numbers over 80 employees, with a large percentage being brought into Hastings from outside the area. “We see continued opportunities to bring more people into the area, helping to boost the local economy,” said Matt. “In addition to giving our staff a career path, it’s about providing an environment where everything they touch, feel and use has quality, and a workspace that is just an awesome place to be.”

“In one sense, what we’ve done here is material, but it’s also about putting your neck out and demonstrating that you value your staff. We’ve only got where we’ve got because of the people we have, and that’s all credit to them.” HSM is an accredited employer for sponsoring employees from overseas, but, as Matt points out, “that door has obviously shut.” The company has embarked on a broad-based approach for attracting new talent, including offering incentives for our staff for referrals, utilising social media, and, as Matt puts it “seeking out prospective employees any way we can.” “A couple of the local schools send us students who are looking at potential careers in the police or in the technical side of things, and they come out and spend time with us on observations. We’ve also approached the Defence Force in relation to people transitioning out of the military who may be looking at a career path in the electronic field.” “If you’re electronically minded and can communicate well, it’s a great career.” HSM’s new office is located at 803 Caroline Road, Hastings. NZSM

Spiked Weapons: Are you protected? Traditional bullet or stab resistant body armour doesn’t necessarily protect the wearer from spiked or doubleedged weapons. Insist on certified spike protection, writes PPSS Group Robert Kaiser.

It is commonly known that stab resistant body armour is very different from bullet resistant body armour. However, it is not commonly known that spike protection cannot be guaranteed with either bullet or stab resistant body armour.

Robert Kaiser is CEO of the UKbased PPSS Group, a provider of high performance body armour and clothing. His written work has been published in several leading international homeland security, gang violence and safety publications.

NZSM

Weapons like ice picks, sharpened screw drivers, spiked clubs and strong hypodermic needles can indeed penetrate bullet or stab resistant body armour if they are not offering specific and – more importantly – certified protection from such threat. Interestingly, the need for spike protection was initially identified by prison and corrections officers, who were at serious risk from injury from

spiked weapons. It was due to those operational risks and the threats faced by officers, that in the mid-1980s the California Department of Corrections issued an urgent requirement for all stab resistant body armour to be tested against a commercial ice pick. The test method attempted to simulate the dynamics and force used by an attacker using a spike and intending to cause maximum harm or death. Growing risk Society has changed, and some will argue not for the better. We can clearly observe a global rise in knife crime, and we must accept that those sometimes incredibly brutal attacks have become more frequent over the past decade.

June/July 2021

Our business is to protect your people, assets, events, venues and infrastructure.

SECURITY GUARDS

SECURITY CONSULTANTS

PERSONAL PROTECTION OFFICERS

Professionally trained security guards, crowd controllers and security teams to secure your people, assets, events, venues and infrastructure.

Quality security consultants to mitigate risk and manage your security concerns anywhere in Wellington. New zealand or world wide

Internationally experienced protection officers (bodyguards) selected exclusively from specialist units of the police and military.

0800 482 738 www.guardhire.nz In addition, we can observe a change in the type of edged weapons now being used in organised crime and terrorist incidents, many of which are double edged blades. These blades perform similarly to a spike or ice pick and have been specifically engineered to enter another person’s body with minimum effort and little or no resistance. Attacks using double edged blades are becoming more frequent, partly because they are so easy to purchase in most countries. After a simple web search, you can find an array of some of the most dangerous types of edged weapons, and you can even benefit from a next day delivery service, with minimal vetting. From the body armour technology point, these double edged ‘daggers’ and blades are exceptionally difficult to protect from. This is where certified spike protection is crucial, as there is physical evidence that body armour can withstand such a threat! Certified protection from spiked weapons is essential for anyone operating within today’s law enforcement or private security sectors. What is your body armour certified against? When it comes to body armour, it really is extremely important to understand that they are very particular in the kind of threats June/July 2021

they protect against. Stab resistant body armour without certified spike protection will be useless in the event of an attack using some of the truly horrific spiked weapons used violently today. In my personal, as well as professional opinion, it is no longer justifiable nor morally appropriate to produce or supply body armour without certified spike protection. The fact of the matter is that spiked weapons are used by those who commit serious crimes, and these individuals will not refrain from brutally attacking a security professional or law enforcement officer, either to avoid arrest or identification. Supplying or selling body armour without certified spike protection will – without any question – result in either serious injury or even death to frontline professionals at some point in the future. Next generation stab-resistant body armour This is exactly why we have decided to say ‘goodbye’ to our previously very successful polycarbonate-based stab resistant body armour, others may well still deem as ‘good enough’. There was a time when we all sat down in our office and we concluded that the performance of our body armour must be further improved so

we could continue claiming we are doing our absolute utmost to protect those who protect us. Technology, as well as design and manufacturing capabilities, have improved so much over the past ten years and it was crucial for us to look once again for the very best raw materials, structures, and concepts to further improve the performance of our kit. Following significant levels of time and financial investment, we ultimately ended up in creating a real ‘new generation’ of stab resistant body armour made from a specially engineered high performance carbon fibre composite (offering certified stab, spike, and impact protection). Ask for proof of body armour certification I can only urge you to request to see an official certification highlighting clearly that the body armour you are about to purchase, wear or issue is offering certified spike protection and is subsequently fit for purpose. I urge you to seek confirmation that your body armour is offering the level of protection required by those men and women charged with protecting us, our venues, events, or infrastructure. Failure to do so may well cause you a serious moral, legal, and/or financial nightmare at some point in the future. NZSM

INTERCOM

Video Intercoms – Tips for a hassle-free installation With the rise in popularity of multi dwelling properties and apartments, intercom systems are becoming more and more important to control common pedestrian and vehicle gates. They offer a level of security that can only be matched by being present 100 percent of the time, which let’s face it in today’s day and age, is simply unrealistic. The good news is that choosing a system that will work in a given situation may be easier than you think. Yes, there are key considerations that make installs tricky such as how far away the gate is, the scale of the installation, which module is most appropriate for the client - keypad or maybe fingerprint, does the client want remote access, even the little things, like where and how it should be mounted can make or break an installation. Dahua’s Video Intercom product lineup simplifies communications between visitors, homeowners, and property management centers. Dahua intercom products come in a versatile lineup of IP, Wi-Fi and 2-wire based solutions for houses and both small and large apartment complexes. In this the second of our three-part series offering tips on how to get the most out of security solutions, we will be exploring intercoms solutions for small and large installations to help you win the job, first time every time. Many times, you can reuse what is already there Many existing older intercom systems use just 2 wires for both power and communications. To keep the cost of upgrading these older systems down you can reuse these existing cables with a modern 2-wire system and still have modern features such as video and mobile apps. For greater security and convenience, you may also be able to connect these intercom systems to Dahua CCTV recorders to use the intercom unit as a camera as well as access live video from other CCTV cameras from your indoor monitor. Conveniently Dahua’s Video Intercom solution allows both the recorder and intercom system to be accessed using the same mobile app. New System Set Up New installs should be wired in either Cat 5e or Cat6 UTP cable. Modern IP systems such as the Dahua VTO3221E use standard ethernet and can be powered by PoE. They are programmed via a web browser on a PC or laptop. It is important to keep in mind the distance limitations of ethernet over Cat cable (~100m). Many intercom units 24

NZSM

are placed at gates and may exceed this distance. In these situations, you could use a point-to-point wireless bridge like the Cambium Bridge-in-a-Box to connect back to the residence. These units have a line of sight range up to 3km making connectivity relatively easy to set up, so even the longest driveways are not a problem. If a hard-wired solution is preferred, run a RG59 coax cable to the gate station and use the Dahua LR1002-1ET/ LR1002-1EC Single-Port Long Reach Ethernet over Coax Extender. These units send both data and PoE power up to 400m to run the outdoor station. As these modern IP based intercoms are programmed via a web browser or the Windows VDP Config tool, it’s recommended to have a laptop with an ethernet port on hand to use for programming or troubleshooting. Here is an example of a single dwelling connected with a Dahua VTO2202 IP Villa intercom system.

There are several benefits to the IP based Villa system: • Easy Installation. Connect all intercom devices only using UTP (Cat5 or Cat6) cable. All video intercom devices support standard POE. • 3-Step setup wizard on indoor monitor. Easily complete the entire configuration without the need for a PC. All operations will be done on the indoor monitor.

Step 1 initialize the indoor monitor

Step 2 initialize the door station

Step 3 Configure the IP address

• Mobile App. With the free DMSS mobile app you will never miss a visitor’s call when you are not at home. The app allows you to see and talk to visitors as well as unlock doors or gates from anywhere you have an internet connection. Using optimized software programs, the new Dahua kit series intercoms have up to 50% faster mobile push speed than previous models. June/July 2021

It’s the little things that matter - Mounting When choosing a location to mount the intercom unit it’s the little things that matter and can make or break a quality install. Keep in mind the installation height requirements so that buttons can be easily reached while giving a clear view of the person calling. With their wideangle cameras Dahua intercoms can be mounted at 1.5m, making things easy for both the visiting caller and the resident. Most Dahua intercoms have a range of mounting options including, flush, surface and surface with rain cover. These are included in the complete kits but are an accessory if you are buying the system as separate parts, so be sure to check you have everything you need.

For even larger systems the new AI Apartment stations like the VTO7541G support 200 apartments or up to 2000 apartments when using a Dahua DSS controller. As well as connecting up-to 2000 apartments the VTO7541G also offers unlocking via face recognition. With the security of liveness detection (a photo will not unlock the door) and a recognition speed of less and 0.2s these units ensure the smooth, secure, and contactless flow of residents into the building. Intercoms can provide access to visitors from anywhere The Dahua DSS system with PC client and mobile app makes it convenient for security guards to manage an entire residential community with the PC client while residents can continue to answer their door from anywhere through an intuitive mobile app. Apartment Lobby

Fence Entrance Check and call to owner





VTH2421FB-P Visitor arriving

 

Remote check through the IPC which is installed at the entrance

VTH2421FB-P

Open the door

Forward Call

Remote door release Fence VTO

VTH2421FB-P DSS Mobile for VDP

VTH2421FB-P IPC Cat5e

VTS5340B

Pro

Public net Lobby VTO

Security Room

Technology for the larger install For larger apartments the Dahua VTO4202-X range gives you the flexibility to pick and choose features that will work best for the situation. Supporting up to 9 modules including keypads, push buttons, card, and fingerprint readers the VTO4202 can scale up to 10 doors and 40 apartments.

For buildings with an on-site manager or concierge, the VTS5340B Master Station can receive calls from visitors and residents, monitor door stations and unlock doors. Calls can be forwarded to the master station after hours on a schedule or when a resident does not answer their indoor monitor.

Display module

Indicator module

Card swiping module

Fingerprint module

As always make sure you communicate with your client to ensure that you fully understand their needs and they understand their options. If you have any hesitation consider learning more, before you get your next intercom install job contact your local Hills representative for more information or better still, register for one of Hills hands on training courses for Dahua intercoms. Don’t let what seems to be a relatively simple install have you stumped. Hills are here to help. Don’t miss part 3 in the August issue to round out your security expertise and learn about access control solutions. Visit hills.co.nz/Dahua or contact Hills on: 0800 1 HILLS (0800 144 557) for more information on Dahua Intercom solutions.

June/July 2021

NZSM

TRAINING

Staying focused on training takes perseverance Electronic security specialist Taina Hetet has stuck with his training programme at E-tec through difficult times brought by COVID-19. Support from E-tec, his employer and his family made all the difference.

When 29-year-old Taina Hetet’s employer Sensormatic New Zealand offered him the opportunity to further his career with study, he jumped at the chance. Hailing from Ngāti Pikiahu-Waewae, Tuwharetoa and Maniapoto iwi and based in Wellington, Hetet is a focused person who’s keen to develop his skills as a security professional. “Moving from telecommunications into a security company, I felt like doing some formal training in my

NZSM

Sensormatic New Zealand’s Taina Hetet

own time to progress my career. With that training, I could slowly move up in the ranks and become a qualified electronic security technician.” Hetet began studying towards the New Zealand Certificate in Electrotechnology (Level 3) with E-tec and MIT in February 2020, just weeks before New Zealand’s first COVID-19 lockdown. When the pandemic hit, Hetet was engaged in distance learning and taking care of his grandparents at home. It was a stressful time, but he felt supported by Sensormatic, which

June/July 2021

NZ Certificate in Electronic Security (Level 4) Have you heard the news? E-tec, in partnership with MIT, is offering the NZ Certificate in Electronic Security (Level 4). This is a great next step if you’re looking to further your career in the security industry or if you currently hold the NZ Certificate in Electrotechnology (Level 3) and are looking to hone your skills further. Better yet this course qualifies for the Government’s Fees Free policy until December 2022, so don’t miss out.* *Free study for this qualification may be available to you under the government’s Targeted Training and Apprenticeships Fund (TTAF). Find out more at manukau.ac.nz/TTAF

Find out more: Visit etec.ac.nz or contact Carine via 022 568 66 71

made special accommodations for him during this period. “Even with us being an essential service, I wasn’t called out at all and I was given time to do my study,” he says. “It just gave me an opportunity to knuckle down.” Hetet wasn’t shy about contacting E-tec for help and advice with his

June/July 2021

study, and they made sure he had everything he needed to achieve. “I’ve often just called E-tec up and asked them ‘Am I doing this right?’ and usually got a response straight away. I don’t have a single bad thing to say about my experience with those guys.” Asked if he has anything to say to trainees studying through tough

times, Hetet has two pieces of advice: 1) Ask for help when you need it. 2) Know that you’re not on your own. “There are times where I couldn’t interpret something and I’ve never been ashamed to ask for help, whether it be from my colleagues or from tutors,” he says. “If you don’t know what you’re doing, there’s no point keeping quiet about it.” “I’ve been fortunate in that aspect that not only have I had good tutors for E-tec, but a good support group from people in my company who are always willing to help with anything.” Hetet has now achieved his goal of becoming an electronic security technician, despite the difficulty of navigating his coursework through COVID-19. He is already looking ahead to the next challenge: “I obviously still want to progress my learning, and I know that E-tec offers a Level 4 in electronic security. It could be something for the not-too-distant future.” NZSM

INSIGHT

What the private sector can learn from militaries about the convergence of cyber and physical threats Physical security and information security teams don’t traditionally play that well together. In the face of evolving converged security threats, writes chief editor Nicholas Dynon, that needs to change. I’ve written about security convergence for some time, but it’s not a topic that seems to elicit waves of engagement from the business world. It’s as if corporate security and risk managers (CSOs, CISOs and the like) have some awareness that the threats they’re increasingly facing are not just cyber or physical but both… but they’re struggling to make sense of it.

NZSM Chief Editor Nicholas Dynon is a frequent commentator on New Zealand’s defence, international security and private security affairs.

NZSM

Conversely, many militaries and national security apparatuses have been positioning themselves to compete in hybridised cyber-physical battlespaces for some time. Maybe private sector organisations can draw some cold inspiration from what’s been happening in the geopolitical space. Militaries and the hybridisation of threats In the world of geopolitics and international relations, the emergence of hybrid digital-physical security threats is widely acknowledged. Most of us know something, for example, of the 2010 Stuxnet attack, the 2015 Ukrainian power grid hack, ISIS online propaganda, and interference in the 2016 US elections by statebased interests.

What these examples have in common is the deployment of digital or cyber capabilities in order to achieve physical – or real world – objectives. And it can go the other way too: physical capabilities can be deployed to wreak havoc on IT platforms, to destroy telecommunications infrastructure, or to extract digitally stored information. These hybridised threats reflect a shift in the way that states (and some non-state actors) compete with each other; how they engage in conflict. It is now widely understood by strategic and military affairs scholars that the emergence of digital-physical threats has led to a new era of conflict no longer defined by open declarations of war or traditional rules of engagement. In the emerging era of ‘smokeless battlefields’, ‘soft conflict’, and ‘hybrid war’, states engage within a continuous state of hybridised kinetic/ non-kinetic conflict. As a result, in addition to the traditional military domains of maritime, land and air, several militaries have recognised that the ‘information domain’ is now a space within which they must operate. Accordingly, a number of countries’ militaries have established information or cyber forces to complement their existing (physical/ kinetic) warfighting units. June/July 2021

In the case of New Zealand, rather than establishing a discrete cyber force, the New Zealand Defence Force (NZDF) has gone down the route of establishing an information domain within its structure that will provide enhanced capability to units that comprise its established maritime, land and air forces. Having recognised the evolving nature of contemporary conflict, militaries are developing hybridised structures and capabilities in response. What about private sector organisations? Security convergence in the private sector There appears to be strong consensus that – despite ample evidence of the devastating effect of hybrid threats in both the geopolitical and corporate realms – most private sector organisations still maintain their digital/cyber security and physical security functions in distinct silos. According to the US Cybersecurity and Infrastructure Security Agency, “physical security and cybersecurity divisions are often still treated as separate entities. When security leaders operate in these siloes, they lack a holistic view June/July 2021

of security threats targeting their enterprise. As a result, attacks are more likely to occur”. It’s a perspective reiterated by PricewaterhouseCoopers. “Many of the conventional physical and information security risks are viewed in isolation,” states a PwC document titled Convergence of Security Risks. “These risks may converge or overlap at specific points during the risk lifecycle, and as such, could become a blind spot to the organisation or individuals responsible for risk management.” The ASIS Foundation study The State of Security Convergence in the United States, Europe, and India has found that despite “years of predictions about the inevitability of security convergence, just 24 percent of respondents have converged their physical and cybersecurity functions.” Heads in the sand? Despite the hybridisation of conflict being widely acknowledged by governments at the geopolitical level, it appears that private sector organisations are taking their time to adjust to this 21st century 4th industrial revolution reality. The convergence of security threats can take the form of something as simple as a malevolent actor

masquerading as a worker and tailgating a bona fide employee through a physical access control system in order to launch a cyberattack via an unattended workstation. It could be a cyber backdoor on an unpatched IP enabled CCTV camera exploited to gather intelligence in relation to an organisation’s physical defences. In the main, an organisation’s cyber/information security team tends to be a world apart – both culturally and operationally – from its physical security team. They tend to have separate reporting lines, and they don’t tend to work that well together. This is exactly the type of situation the hybridised threats of today can exploit… and will increasingly exploit. We need to be smashing the organisational siloes that have been keeping organisations’ digital and physical functions apart. We need to converge our structures and our security responses in order to address converged security threats. It’s not easily done, as there are organisational boundaries that will need re-drawing, organisational cultures that will need reengineering, and traditionalists that will need re-educating. But it has to be done. NZSM

74% of CISOs would pay a premium to work with thought leaders Research uncovers the importance of thought leadership in influencing cybersecurity buying decisions, with 74% of CISOs stating they would pay a premium to work with cybersecurity vendors they regard as thought leaders.

Security PR network Code Red released its global research report into the value of thought leadership on 14 May, showing 74 percent of Chief Information Security Officer’s (CISO) would pay a premium to work with cybersecurity vendors they regard as thought leaders. The findings reveal that thought leadership plays a fundamental role in a CISO’s procurement choices with 97 percent using thought leadership content at different stages of the buying decision process and 43 percent when making a final decision on appointing a cybersecurity company. Thought leadership is paramount even after a deal has been struck, with 35 percent of CISOs increasing their business with an existing supplier because of strong thought leadership. Trust is central to the way CISOs access thought leadership and make decisions. Three key means of obtaining trusted content that was clear was including independent research using keywords, reviewing content by networks of trust (friends, family, and colleagues), and reading trusted trade media publications. Assumed methods for sourcing content such as paid advertising and 30

NZSM

direct EDMs ranked lower, while the way CISOs consume thought leadership content is shifting due to COVID-19, with 71 percent preferring videos and webinars. As the industry continues to shift and machine learning and data analytics continue to rise, it comes as no surprise that 28 percent of New Zealand and Australian IT professionals ranked Artificial Intelligence (AI) as the most popular topic for decision makers. Elaine Banoub, Technology Director at Primary Communication, Code Red’s Australian Partner, said the speed at which cyberthreats continues to evolve has made it clear that cybersecurity is no longer an IT issue, but a business one. “With the constantly changing threat landscape, it is critical that businesses have access to strategic cyber threat intelligence to be able to properly manage a risk,” Banoub said. “Technology disruption, regulations and cyber-threats are rapidly evolving in the cybersecurity sector, and CISOs are looking at experts in the field to provide valuable insights, opinion, and interpretation.” “Companies investing in long-term visionary thinking and discussion will gain an important competitive

advantage, while building value for stakeholders in their own business,” she added. Other key findings from the 2021 Code Red Global Research Report include: • The top three places cyber professionals source thought leadership content are IT and cyber security trade media publications (54 percent), direct keyword search online (46 percent) and content shared by friends and networks on social media (31 percent). The assumed marketing avenues of social media ads, online ads and EDM are bottom three sources. • 55 percent of cybersecurity professionals spend 1-3 hours a week consuming thought leadership content. • Video (43 percent) and webinars (38 percent) as preferred formats for thought leadership content are on the rise, but trade media articles remain on top. • Network security (23 percent) was the most popular cybersecurity thought leadership topic, 21 percent, opted for cloud security and cyber security software and services, while 18 percent were more interested in AI and machine learning. June/July 2021

REACH

NEW HEIGHTS in Professional Excellence

ASIS accredited certifications can help you reach your career goals.

Validates your ability to conduct security investigations through the effective use of surveillance, interviews, and interrogations. Designed for those with 5 years of related experience.

WHY EARN THE PCI DESIGNATION? • Provides independent confirmation of your specialized skills in security investigations • Gain global recognition by your peers and industry • Get a competitive edge in the marketplace • Enhance your career and earnings potential • Enjoy personal satisfaction and professional achievement Be one of the many ASIS board certified practitioners who are leaders, mentors, and trusted strategic partners, serving both their organizations and the profession.

Visit www.asis.org.nz

“PCI is an important element in the ASIS Certification programme, dovetailing into both CPP and PSP for a comprehensive understanding of broader security industry objectives. An effective and reliable investigation depends on objectivity, thoroughness, relevance, accuracy and timeliness. PCI helps identify critical investigative outcomes, including evidence collection, case management, and the process of offender detection, identification, interview and prosecution. Good physical security designs, together with robust policies and procedures are key elements in a successful investigation. The PCI certification provides an insight into how these pieces interrelate." - David Horsburgh, MSc CPP PSP PCI

WHY SHOULD AN EMPLOYER HIRE ASIS CERTIFIED PROFESSIONALS? • B uild a strong, dedicated team committed to high standards and continuing professional development • Promote ongoing education of critical job knowledge and skills • Feel confident that your staff are using best practices • Recruit the most qualified professionals • Reinforce or elevate your organization’s reputation and credibility Increase the competency level of your staff by supporting your security professionals in their certification journey.

Normalising data leaks: A dangerous step in the wrong direction New research predicts there will be a cyberattack every 11 seconds in 2021. However, this doesn’t mean that it should be normalised. Quite the opposite in fact, explains Andrea Babbs, UK General Manager, VIPRE SafeSend.

It was only recently, in early April, when it came to light that the personal data from over 500 million Facebook profiles had been compromised by a data leak in 2019. And since then, an internal Facebook email has been exposed, which was accidentally sent to a Belgian journalist, revealing the social media giant’s intended strategy for dealing with the leaking of account details from millions of users. Andrea Babbs is UK General Manager, VIPRE SafeSend and has worked in the IT Industry for over 20 years. She has worked for IT security vendors and resellers dealing with email, endpoint and web security.

NZSM

Worryingly, Facebook believes the best approach is to ‘normalise the fact that this activity happens regularly,’ and to frame such data leaks as a ‘broad industry issue’.

Dangerously dismissive The statement from Facebook is a very worrying strategy to come from a business which holds the personal and business data of millions across its platforms. Particularly in the wake of increasingly stringent regulations appearing globally, it is startling for such a large organisation to casually dismiss data leaks. To give businesses an excuse to no longer invest time, money and effort in data security is a dangerous step in the wrong direction. Personal data is a valuable currency for cyber hackers, and individuals want to ensure it is protected. Leaking this confidential data, such as medical information, credit card numbers or

June/July 2021

personally identifiable information (PII) can have far-reaching consequences for both individuals and businesses. Keeping this data safe should be businesses’ number one priority. However, data is only as safe as the strength of an organisation’s IT security infrastructure and its users’ attention to detail. A defence on multiple fronts If you do not have the right technology in place to keep your data safe, then you will face problems – but the same goes for having the right tools and training available to your users. Data security is a difficult and never-ending task, one which requires ongoing investments on multiple fronts by every organisation in the world. Particularly in the wake of COVID-19, businesses have had to transition to remote working and accelerate their processes to the cloud. Moving to cloud based security which moves with your users is key. And investment in user training will become more normalised because an uneducated workforce is a big risk to an organisation’s data security efforts. To combat such threats, deploying a layered security approach is necessary for both small and large businesses. June/July 2021

In today’s modern threat landscape, a data protection plan needs to include cover for both people and technology at its core. There are innovative tools available, such as VIPRE’s SafeSend, which supports busy, distracted users to double check their attachments or recipient list before sending an email to help them make more informed decisions around the security of their data. Additionally, companies need to invest in thorough and more frequent security awareness training programmes, which include phishing simulations as a key component. We will also see a bigger move towards Zero Trust Network Access (ZTNA) tools – which only allow people to access the data they need, not the entire network. There will be an evolution in this area, and protection for a workforce ‘on the go’ will become the standard, but with the same foundational principles of investing in the right technology, and the users themselves. Reputation and responsibility No matter where users are or what they are doing, keeping security front of mind will be one way to ensure good IT security hygiene for businesses. Those who have already made significant progress in this area

will reap the rewards in terms of safe data and reassured customers, clients and prospects. Businesses that get out in front of all areas of data loss, not just attacks from bad actors, are the ones that will do well in the long term. The ability to reassure customers and prospects of the safety of their data will become the new marketing message in the coming years, which is why attempting to normalise data loss could be so damaging to Facebook’s reputation. Cyber threats are only going to increase in sophistication and become more personalised to the individual by using social engineering attacks or fileless based attacks. Attackers are going to continue to take advantage of current events, such as COVID-19, to trick users into clicking a link, downloading an attachment or signing into a phishing website etc. Businesses of all sizes have a responsibility to keep data secure – and users must be a part of the solution, rather than the problem. In order to do this, businesses need to place cybersecurity as a priority throughout their processes and invest in the right tools and training to make this more of a business-critical solution, and less of an ‘emerging necessity’ as it is now. NZSM

LAW ENFORCEMENT

Government takes action against gang crime Introduction of Firearms Protection Orders aims to take guns away from those involved in organised crime, serious criminals and persons charged with terrorism-related offences.

The Government will make it illegal for high risk people to own firearms by introducing Firearms Prohibition Orders (FPOs) that will strengthen action already taken to combat the influence of gangs and organised crime to help keep New Zealanders and their families safe, Police Minister Poto Williams and Justice Minister Kris Faafoi announced on 11 May. “It is a privilege, not a right, to own or use a gun in this country and we need to take that ability out of the hands of people who pose a threat to our communities,” Police Minister Poto Williams said. Qualifying offences will be serious firearms offences (those which would disqualify someone from holding a firearms licence), serious violent offences (as defined in section 86A of the Sentencing Act 2002), an offence of participation in an organised criminal group (section 98A of the Crimes Act 1961), and terrorismrelated offences under the Terrorism Suppression Act 2002. The FPOs will offer additional controls on specified people, for instance, controls on where a person may reside or visit. They also will ensure that a person subject to an Order cannot use a firearm under the supervision of a licensed firearm owner. 34

NZSM

Police Minister Poto Williams.

A person subject to an FPO cannot own, use, access or be around firearms. Unless the Court says otherwise, they also cannot reside in locations where there are firearms, visit specific locations where there are firearms, or associate with someone who has a firearm on them. Breaching the conditions of the FPO will be a criminal offence. The penalties envisaged would depend on which conditions the person had breached: A person who was found in possession or control of a firearm would face a penalty of up to five years imprisonment, or up to seven years imprisonment if the firearm was a prohibited firearm.

If the person breached a condition such as residing in a location where there were firearms, or visiting a prohibited location such as gun shop, the penalty would be up to two years imprisonment. “This complements work this Government has already taken, including a record investment in Police meaning we have been able to go hard against gangs and organised crime networks,” said the minister. “We have the largest Police workforce ever, with 700 officers to be focused on organised crime.” The Criminal Proceeds (Recovery) Act will also be amended to introduce a new power enabling seizure of assets of those associated with organised crime – where the person’s known legitimate income is likely to have been insufficient to acquire the asset. “We’re hitting gangs where it hurts – their pockets. This new organised crime power will help prevent those involved in organised crime from benefitting from crime and remove the primary reason for organised crime to exist – the profits they can make from vulnerable New Zealanders,” Kris Faafoi said. “Those involved in organised crime, including those who launder their money, would have to demonstrate their assets were obtained legitimately,” he said. June/July 2021

PACIFIC SECURITY DYNAMICS 31 August - 3 September 2021 PACIFIC SECURITY DYNAMICS This four day course delivers an in-depth and interactive study of comprehensive security challenges and cooperation opportunities in the vast Pacific region which stretches from the Antarctic in the south to the Bering Strait in the north. The course includes presentations by prominent experts from academia and the public/private sector, daily small group deliberations, a concluding tabletop exercise and reflection on applying the learning back in the workplace. Topics will also cover the implications of the Covid-19 pandemic on security and cooperation in the Pacific region.

KEY TOPICS INCLUDE:

LEAD ACADEMIC PRESENTERS AND FACILITATORS Professor Rouben Azizian Dr Anna Powles Dr Germana Nicklin Also presentations by senior diplomatic, New Zealand government, business and civil society representatives.

WHAT: WHEN:

•

sources and factors affecting regional security and stability;

WHERE:

•

key regional actors, their policies and relationships;

PRICE:

•

regional flash points, such as the Korean Peninsula and South China Sea;

•

transnational crime, climate change and resource security;

•

security-trade-development nexus;

•

implications of the New Zealand Government policy “reset” towards the Pacific Islands.

LEARNING OUTCOMES: •

gain comprehensive knowledge of complex regional security challenges and strategic trends;

•

develop New Zealand responses to these challenges and trends.

To register visit: pacificsecuritydynamics.co.nz

CONTACT:

Professional Development Course 31 Aug - 3 Sept 2021 Executive Seminar Suite, Gate A, , Massey University, Wellington Campus $2799 (inc gst) Earlybird - $2519 (inc gst) (until 1 August) Claire Grant c.grant@massey.ac.nz 04 801 5799 extn 63597

INDUSTRY

NZSA CEO’s May Report In this update, NZSA CEO Gary Morrison talks vaccine roll-out, schools careers visits, New Zealand register of security professionals, licensed gang members and more.

In February 2020 we secured a funding grant from the Ministry of Education (MOE) under a programme designed to “provide opportunities for young people to connect to the world of work and explore industry specific careers while in school to enhance their perspectives on vocational education and while you learn pathways”.

Gary Morrison is CEO of the New Zealand Security Association (NZSA). A qualified accountant, Gary originally joined Armourguard Security as a junior accountant and held several roles over two decades prior to appointment as GM for New Zealand and Fiji, after which he established Icon Security Group.

The grant was to cover our hosting security career events at 10 lower decile secondary schools throughout the country, starting in July 2020 and concluding June 2021. Unfortunately, Covid and the resulting lockdowns caused an initial delay in scheduling the visits and once schooling did return to some semblance of normal, the focus quite correctly was on assisting students with catching up on their learning and preparation for exams. Thankfully MOE were happy to hold the funding arrangements over and we were able to commence our

Andrea Charlton , NZSA National Manager Training and Employment Services

NZSM

security career events during April, albeit with our 10 visits now condensed into a three month window. During April, NZSA National Manager Training and Employment Services, Andrea Charlton, visited schools located in Whangarei, Hamilton, Rotorua, Palmerston North and Christchurch. The visits were coordinated with the school career advisors and included an introductory presentation and overview of the Security Careers website (www.securitycareers. co.nz), presentations from several member employees talking about their careers and what they enjoy about the security industry, and a demonstration and controlled use of the new Virtual Reality (VR) training platform for the mandatory training. The reception from those attending was fantastic and with many of the students indicating they would certainly consider security as a viable career option when they complete their schooling. What was also very evident was how the students related to the VR training platform and their natural affinity towards the use of new technology. They were able to pick up and use the headsets without the need for induction and instinctively started to follow and demonstrate the desired actions around positioning, stance and use of de-escalation techniques. I mentioned this to my son-inlaw who works in the IT field and he related it to digital natives versus digital immigrants, and I know which side I sit on! June/July 2021

I would also like to thank the employees of our members who came along to talk to the students. Their presentations were both inspiring and motivating and it was patently clear that they took great pride and pleasure in their jobs. Covid-19 vaccine rollout In our last newsletter I advised that we had been communicating with the Ministry of Health to ensure that security workers (other than those working at the borders and quarantine facilities) were being prioritised in the rollout plan along with other essential service workers. We were advised at that time that the individual District Health Boards would be overseeing the vaccine programme within their own regions and that indicative plans and timelines would be made available well prior to the proposed rollout during May. Unfortunately we are now into May and all communication with the Ministry appears to have dried up and we, along with other industry sectors with essential service workers, are operating in a void as to when or even how the rollout will be facilitated. From media reports concerning vaccinating of the elderly there appears to be significant differences in the capability and capacity of the District Health Boards and from some reporting it would appear that some regions may be six to eight weeks behind the original target dates. We will continue to seek further information on this and will communicate any updates upon receipt. June/July 2021

New Zealand Register of Security Professionals Our original plan to have the feasibility study on the creation and implementation of a Register of Security Professionals completed by the end of April hit a bit of a snag when the Skills employee conducting the study left his employment to return to his previous employer. Whilst the feasibility study is near completion, there are some findings and assumptions that require further analysis and investigation and additional questions that need to be researched, so the NZSA Board has determined that the target date for the final report will now be extended to 30 June. Schedule 1A Employment Relations Act 2000 - Security Officers Government has passed an Order In Council, with effect 1 July 2021, that will see an extension of Part 6A of Schedule 1A of the Employment Relations Act 2000 to include Security Officers. Effectively this now means that Security Officers (defined as property guards, monitoring operators, crowd controllers, mobile security patrols and cash-in-transit officers) are recognised as Vulnerable Employees and are given protections when their employment is impacted by restructuring that results in the contract for service shifting to another provider or taken in-house. In these situations there is an obligation on the new party providing the service to offer employment to the incumbent employees on terms

and conditions no less favourable that they currently enjoy. This includes the transfer of leave and service entitlements and also prevents subsequent restructuring such as reduced hours or payments. Based on the experience of other industry sectors covered by Schedule 1A, it is very probable that this will have a significant impact on those providing personnel security services. MBIE has advised that it will be preparing guidance material for distribution prior to the Order coming into effect on 1 July. We have also been working with our counterparts at the BSCNZ (Building Service Contractors NZ) to get an understanding of the issues likely to be faced and to ensure that we have template documentation and reports ready to roll-out to assist our members once the MBIE materials are received. Media reports of licensed gang members Over recent months there have been several reports in the media with regards to gang members being employed unknowingly by security providers. This obviously raises questions about the effectiveness of licensing checks and in particular, what measures can be taken to restrict the ability of gang associates who do not hold convictions (often referred to as clean skins) to obtain a certificate of approval. I can advise that our Registrar is well aware of the concerns and has been working closely with the NZ Police to ensure processes and NZSM

communications are as stringent and robust as possible and this is evidenced by an increasing number of Police objections to licence applications and in declined applications. It is also important to note that security providers have an important role to play in this area. Where an employer becomes aware of an individual who holds a certificate of approval but does not meet the qualifying criteria for a fit and proper person, there is a moral obligation on them to lodge a complaint with the PSPLA seeking removal of the individual’s licence (certificate of approval). The complaint process is not particularly onerous and can be done online with the PSPLA, however where the employer would prefer to maintain their anonymity (complainants details are disclosed) I am happy for them to forward the information and any supporting evidence to my attention and I can file the complaint under my name. Virtual reality security training platform As advised in our last newsletter, the VR Security Training Platform has been jointly developed by JBA (Joy Business Academy) and NZSA in partnership with MSD and will form a key component of the wider SkillsVR offering being developed in conjunction with MSD. 38

NZSM

Over the last few weeks we have seen our first learners successfully complete their mandatory training through the platform and with our first two security providers signed up, learner volumes will be scaled up during the coming months. For further information on the SkillsVR Security Training Platform or to arrange a live or online demonstration, please contact Chris Thomas on 021 771 173 or chris@ skillsvr.com. Special Interest Groups (SIGs) Both the Security Training and Professional Development SIG and the Crowded Places Strategy SIG have been active over recent months and whilst neither have significant developments to announce at this time, they provide an important conduit for the NZSA in tapping into the experience and knowledge that sits within our industry, and in ensuring that we continue to focus on the issues that are important to our stakeholders. For the Security Training and Professional Development SIG, one of the highest priorities for this year will be looking at how we can raise industry standards by improving the quality, accessibility and uptake of industry training and with a greater awareness of literacy and numeracy competency, and ways that we can assist in improving this, as a critical part of the process.

Given that the Crowded Places Strategy SIG was only formed earlier this year, the immediate focus is on determining the structure of the group and how we will interact with government agencies, clearly defining our mission and objectives and capturing a concise overview of our initial group discussions. PSPLA and workplace investigations A recent legal decision has ruled that consultants offering workplace investigation services must be licensed as private investigators under the PSP&PI Act unless they hold another equivalent accreditation. Those conducting in-house investigations are also exempt. Under the Act, any person or business that takes money to obtain and supply information (other than that in public records) relating to the character, actions or behaviour of others, is deemed to be a private investigator and this potentially has significant impact on those in the employment, health and safety sectors. If you have a particular interest in either the Training or Crowded Places sectors and feel that you can add value to the groups, please contact me on gary@security. org.nz or 021 122 9606 for more information. June/July 2021

e c u r i ty I

S ’s

mited 30 y Li e

Loktr

y tr s u

ervicing

Loktronic for Electric Locking Hardware and Accessories

SURVEILLANCE TECH

Three markets that can benefit from smart surveillance Writing for ASIS International’s Security Technology, Alexander Harlass explores three markets that can benefit from smart surveillance technology – agriculture, industrial controls and manufacturing and logistics As we continue into 2021, organisations in nearly every business sector are continuing to adjust to changing workforce and economic conditions. Decisionmakers across the board will be focusing on initiatives to accelerate their long-term technology and digitalisation plans to accommodate remote and virtual operations.

Alexander Harlass is team lead solutions consultant, Security & Safety Things. Based in Munich, Alexander has years of experience as a freelance software engineer and innovative technology researcher.

NZSM

While the COVID-19 pandemic has acted as a catalyst for some, others have been spurred by the opportunities offered by the growing maturity of Artificial Intelligence (AI) and Machine Learning (ML) technologies. These new advantages, combined with cutting-edge computer vision capabilities, have enabled organizations to deploy new technologies like smart cameras with video analytics that are capable of a variety of uses. This has opened up a whole new range of use cases, as a single smart camera equipped with AI-enabled intelligent video analytics can be used for theft detection, early smoke and fire detection, monitoring for potential hazards and many additional business and operational optimisation applications. Already today, smart cameras can support healthcare facilities to improve patient safety and wellbeing or aid retailers to source valuable intelligence on shopper behaviour that allows them to take measures that increase store revenue and

profit. As the uses for video analytics become more and more mainstream in 2021, we anticipate seeing them expand into new industries and areas of use. Security and Crop Monitoring in Agricultural Sectors Surveillance and monitoring technologies are offering value to industries such as agriculture by providing a cost-effective solution for monitoring of crops and business assets and optimising production processes. Smart cameras are among the new technologies that can assist in reducing energy usage, as well as reduce the environmental strain of modern farming. Some niche farming organisations are already implementing AI solutions to monitor crops for peak production freshness to reduce waste and increase product quality. These solutions can also surveil vast amounts of livestock in fields to count animals, help detect the presence of predators, or to identify if an animal is injured. Other use cases include mitigating environmental threats, such as mould, parasites and other insects, as smart camera monitoring can provide early identification of these pests and trigger appropriate action before wider crop damage occurs. AI-enabled smart cameras can further be used to monitor moisture levels in soil to maintain the proper levels of hydration, as well as reduce excess water waste. June/July 2021

that will enable them to optimise highly technical processes along different stages of manufacturing, as well as ensure employee safety and the security of industrial assets and resources.

Using video monitoring in the growing environment, as well as along the supply chain, also provides value to large-scale agriculture production. Beyond optimising processes through automation, smart cameras equipped with AI-enabled analytics can reduce risk of injury or loss due to machinery breakdown, as well as assist in preventative mechanical maintenance. Applications may also help track inventory in real-time, improving knowledge of high-demand items and allowing for better supply chain planning to reduce product spoilage. Smart cameras in agriculture are also useful for the prevention of physical security risks to staff and products. In warehouses, object detection applications can be used to determine the presence of weapons. Also, if theft of agricultural product is a concern, zone applications can be used to notify proper personnel when an unauthorised individual enters a sensitive area of a warehouse, field, or building. Enhanced regulatory and safety measures in industrial complexes In industrial settings, smart surveillance and AI-enabled applications can be used to ensure compliance with organisational or regulatory safety measures. Object detection apps can identify if employees are wearing proper safety gear, such as facial coverings, hard hats, or lifting belts. Cameras can help to automatically recognise

accidents or unusual events in real time, in case a worker falls to the ground or is hit by a falling object. A smart camera can identify necessary preventative maintenance on machinery and structures, and potential safety hazards—such as a loose cable causing sparks, potential wiring hazards, or even defects in raw materials. Other more subtle changes, such as gradual structural shifts, cracks, or increases in vibrations— ones that would take the human eye months or years to discover—are detectable by smart cameras trained to identify the first signs of mechanical deterioration. Decision-makers at industrial facilities can also find value in early detection of fire and smoke. Conventional fire alarms are often difficult to properly mount in large buildings or outdoor spaces and require regular maintenance. Smart security cameras can be deployed in difficult or hard to reach areas. When equipped with fire detection applications, they trigger notifications far earlier than a conventional fire alarm and, thanks to AI capabilities, they can reduce false alarms by its ability to distinguish between smoke, fog, or other objects that might trigger a false alarm. By digitising analogue environments, whether a smoke detector or an analogue pressure gauge, decision-makers will have access to a wealth of data for analysis

Business optimisation in manufacturing and logistics The transportation industry and logistics sector has seen global growth, but with that, new challenges have arisen. Surveillance offers an entirely new way to monitor and control the physical side of logistics, correcting problems that often go undetected by the human eye, but have significant impact on overall customer experience. Video analytics can assist logistic service providers in successfully delivering the correct product to the right location and customer in its original condition by enabling the supply chain to be both secure and efficient. The latest camera technology and intelligent software algorithms can analyse footage directly on the camera—detecting a damaged package at the receiving or loading dock before it is loaded onto a truck for delivery to the customer. When shipments come in, smart cameras can also alert drivers of empty loading bays for offloading or alert facility staff of potential blockages or hazards for incoming and outgoing vehicles that could delay delivery schedules that are planned down to the minute. The future of smart surveillance From intelligent shelving systems in warehouses to autonomous-driving trucks, object detection and the use of AI in monitoring agricultural crops and livestock, the rise of automation in these markets will only increase the overall demand for video analytics. In 2021, decision-makers across industries will be challenged to examine existing infrastructure and determine if they’re ready to make an investment in a sustainable, multi-use security and business optimisation solution.

June/July 2021

NZSM

CYBER SECURITY

Cato Networks Report: 20-yearold exploits and TikTok flows threaten enterprise security Extensive analysis of 200 billion flows across 850 enterprise networks worldwide uncovers high risk from age-old cyber defence weaknesses and leading consumer video sharing application. Cato Networks, the provider of the world’s first SASE (Secure Access Service Edge) platform, recently announced the results of its quarterly analysis of global enterprise networks. The Cato Networks SASE Threat Research Report found that popular preconceptions of enterprise security and network usage are often inaccurate. While exotic attacks and nationstates such as Russia and China grab headlines, the most prevalent enterprise cybersecurity risks in Q1 came from unpatched legacy systems, attacks from the US, and consumer applications, such as TikTok. “Cato’s converged SASE solution enables us to pull together security observations with network analysis from live traffic. During Q1, we saw how enterprise security leaders can’t focus on newly discovered vulnerabilities at the expense of older, more mundane risks,” said Etay Maor, senior director of security strategy at Cato Networks. “Threat actors constantly scan for unpatched, EOL (end of life) and legacy systems, vulnerabilities that are two to nearly 20 years old. And while several governments have raised privacy concerns with TikTok, and 42

NZSM

ultimately banned this application from their networks and devices, too many enterprise networks continue to carry TikTok flows.” Legacy security defences fail as old exploits form most common threat. While the industry focuses on exotic attacks - like the SolarWinds breach — the real risk to enterprises comes from older exploits, some as much as 20-years old. “While organisations always need to keep up with the latest security patches, it is also vital to ensure older system and well-known vulnerabilities

from years past are monitored and patched as well,” said Maor. “Threat actors are attempting to take advantage of overlooked, vulnerable systems.” Cato Networks’ research showed that attackers often scanned for end-of-life and unsupported systems. Common Vulnerability and Exposures (CVE) identified by Cato were exploits targeting software, namely vSphere, Oracle WebLogic, and Big-IP, as well as routers with remote administration vulnerabilities.

June/July 2021

Patching may address the problem, but enterprises find that staying on top of patching is challenging, and legacy security systems are often insufficient to stop threats. Furthermore, threat actors are constantly changing their signatures and characteristics to avoid detection. Application vulnerabilities expose many businesses to attack. During its analysis of network traffic, Cato identified several security risks. Microsoft Office and Google continue to dominate, but widespread use was seen of remote access software, such as Remote Desktop Protocols (RDP), Virtual Network Computing (VNC), and TeamViewer. If not properly secured, these applications can be targeted by threat actors with disastrous results, as was made apparent by the recent attacks on the Florida water supply system, Molson Coors, and Colonial Pipeline. “The prevalence of remote access software is troubling from a security perspective. Many attacks on critical infrastructure involved attackers exploiting vulnerabilities and weak passwords in these verry package. If organisations need to run such software, special care must be taken to ensure their security,” said Maor. Enterprise networks also continue to be populated by consumer applications, with the most popular being TikTok that had millions of more flows than Google Mail, LinkedIn, or Spotify.

June/July 2021

In recent months, Cato also saw a significant increase in Robinhood and eToro transactions – likely driven by the recent GameStop-Reddit-Wall Street. The data transmitted to these trading applications surpassed more popular applications such as CNN, The New York Times, and CNBC. “The increase in consumer applications not only consumes bandwidth but poses a security risk to enterprises,” Maor said. “As the type of data flow and applications changes, so does the way in which threat actors exploit vulnerabilities, and in turn, the way enterprises secure their networks must change as well.” Threats originate from countries other than Russia or China To keep in front of attackers, enterprises will often block traffic from certain countries, such as Russia and China. Such an approach is ineffective. Cato’s analysis shows that during the first quarter of 2021, most threats did not originate from China or Russia. In fact, more malware attacks originated from the United States than any other country. “Blocking network traffic to and from ‘the usual suspects’ may not necessarily make your organization more secure,” Maor said. “Threat actors are hosting their Command & Control servers on ‘friendly’ grounds including the U.S., Germany and Japan.” Machine learning algorithms spot network characteristics of security threats.

To get a proper understanding of network and cybersecurity trends for its report, Cato Networks analysed nearly 200 billion network flows from more than 850 enterprises worldwide on the Cato global private backbone between 1 January 2021, and 31 March 2021. Approximately 16 billion security events were identified and fed to the Cato Threat Hunting System (CTHS). This proprietary machine learning platform identifies threats through contextual network and security analysis. By understanding and identifying the network patterns of cyberattacks, CTHS alerts on security threats often undetected by legacy cybersecurity software. In all, CTHS identified 181,000 high-risk flows, which led to 19,000 threats verified by the Cato security team. The highlights of this analysis were captured in the Cato Networks SASE Threat Research Report at https://go.catonetworks.com/SASEThreat-Research-Report.html Cato is the provider of the world’s first SASE platform. SASE is a new enterprise networking technology category introduced by Gartner in 2019 that converges the functions of network and security point solutions into a unified networking and security platform that is identity-driven, cloud-native, globally distributed, and securely connects all edges (WAN, cloud, mobile, and IoT). NZSM

INDUSTRY

Atlas Gentech showcases and celebrates partners May was a big month for Atlas Gentech. In addition to hosting its three-city enterprise integration solutions event, the distributor announced its Inner Range Partner Award recipients. Hosted in Auckland (6 May), Wellington (11 May) and Christchurch (13 May), the Atlas Gentech Enterprise Integrated Solutions Event boasted an impressive manufacturer line-up that included Bosch Video Systems, Milestone VMS, Suprema, Inner Range, and HealthSafe. The events of 2020 have seen leading global manufacturers pivot to providing solutions designed to keep people and property safe in the ‘new normal’, including contactless access control and video artificial intelligence solutions for social distancing, building occupancy and crowd density. According to Andrew Thorburn, Atlas Gentech’s Enterprise Security and Risk Manager, the event aimed to “demonstrate how post-COVID, access control systems and their ecosystem partners have evolved and converged their offerings further to support contactless user authentication.”

NZSM

“Live demonstrations of the vendors’ latest technology offerings provided attendees the opportunity to see how they have addressed demand for Contactless Access Control authentication including Advanced Video Analytics, to support a more frictionless experience” he said. In addition to Atlas Gentech’s Thorburn, the event’s presenters included Syd Anthony and Paul Donnelly from Bosch, Anna

Schreiber and Brian Cross from Milestone, Russell Blake from Inner Range, and Gavin O’Hara from HealthSafe. Syd Anthony and Paul Donnelly demonstrated how Bosch’s analytics at the edge enhances business function, including video as a sensor functions and the use of video analytics to identify objects through meta data processing to perform functions such as unlocking automatic doors. The Milestone presentation showcased the VMS’ functionality when integrated with Bosch and Inner Range Integriti, with either GUI able to undertake control and reporting functionality. “Bosch forensic search enables fast and efficient dissemination of video and video metadata,” said Thorburn. “It’s forensic search plug-in provides a powerful set of rules and filters to extract the information that the operator requires – with sixteen analytics rules and sixteen tasks able to be run concurrently.” June/July 2021

manage multiple user databases. Its high-level integration with Inner Range Integriti allows users to be loaded into and manged via the Integriti platform.”

Inner Range introduced its Integriti V21 software, demonstrating a range of new features via the software’s ‘single pane of glass’ and its multiple default COVID contact tracing reporting functionality. “Also demonstrated were HID Signo readers with the Bluetooth twist & go and proximity SEOS mobile credentials,” said Thorburn, “as well as the HID Origo portal direct integration with Integriti – again a single portal to manage onboarding of users.” HealthSafe’s Gavin O’Hara demonstrated the use of HealthSafe SecurePass’ QR code readers for contactless sign in and out, including access control; user authentication through a BYOD device (facial recognition/finger print scanning

June/July 2021

authentication); and HID Bluvision integration for asset monitoring, contactless sign in/out, and restricted area monitoring. Posting about the event on LinkedIn, HealthSafe Managing Director Kevin McAfee commented, “HealthSafe SecurePass Visitor Management takes away the archaic paper sign-in process and introduces you to a contactless visitor system that you can easily set up in minutes and start managing your H&S governance whilst supporting your security.” “The event also introduced Suprema, the latest addition to the Integriti ecosystem offering integrated facial recognition and biometrics as access control credentials within the Integriti solution,” added Thorburn. “There is no longer the need to

Inner Range Partner Awards Just days later on 24 May, the distributor announced its Atlas Gentech Inner Range Partner Award recipients for 2020 – the awards recognising successes achieved by Atlas Gentech partners in 2020 utilising Inner Range solutions. “It has been a disruptive couple of years, but it is nice to finally be able to recognise the successes of our Atlas Gentech partners working with our Inner Range intruder, access and communications solutions,” said Andrew Thorburn. The Project of the Year awards receive nominations from Atlas Gentech’s internal team, and are selected via a panel vote based on the ‘exemplary use of the Inner Range solution, one that epitomises the strength and flexibility of the respective Inner Range platform’. “There were so many amazing projects nominated for these awards, it’s truly incredible to see the depth, expertise and passion of our Atlas Gentech partner channel,” commented Andy Brown, Atlas Gentech’s Director of Sales. “Congratulations to our partners, we deeply value your continued support,” said Russell Blake, Sales Manager ANZ, Inner Range. “We are humbled to see how far you have taken the Inner Range product and the bespoke solutions you have created as a result.” The Atlas Gentech Inner Range Partner Award recipients for 2020 are: • Atlas Gentech Inner Range Partner of the Year – ADT Security Limited • Infiniti Project of the Year - Advanced Security Group – Undisclosed Government Entity • Integriti Project of the Year Waterford Security Ltd Limited – Foodstuffs Koru Project • Inception Project of the Year - Sound Technology Limited – Greenlane House NZSM

SAFE CITIES

Eden Park joins vGRID SaferCities network SaferCities adds Eden Park’s Venue Operations Centre (VOC) to the vGRID SaferCity Platform, creating a live link into major events at New Zealand’s national stadium for police and emergency services. The vGRID SaferCity Platform is a secure application which allows authorised users to either share their CCTV operator screens or nominate public facing CCTV cameras and push live visual information to Police if required during key events and operations. With the new permanent Eden Park connection to vGRID SaferCity, Police will have access to seven CCTV operator screens and a subset of the 120-plus cameras across the stadium during planned events or emergency situations. The connection will promote faster, more effective collaboration between Police and VOC staff, which on Match Day includes operations, security, and health and safety personnel and representatives across New Zealand Police, Fire and Emergency NZ, St. John, and supporting security staff. “We are pleased to enable a live link into our stadium network, further strengthening our collaborative relationship with the New Zealand Police and SaferCities,” said Eden Park Chief Executive Officer Nick Sautner. “With a significant pipeline of events scheduled at Eden Park in the coming years, including three World Cups, international test matches and additional concerts, this enhanced accessibility and connectivity with Police will be vital.” 46

NZSM

Eden Park Operations Manager Keith Parker says the connection is an important next step in strengthening robust operating systems within Eden Park. “Eden Park is committed to ensuring the fan experience, including safety and wellbeing,” he said. “Collaborating with the New Zealand Police allows us to further enhance our processes and event experience and ensures that police have live and real time access to the 120-plus cameras within New Zealand’s biggest stadium.” “Given our focus on world-class experiences and safety for all patrons at Eden Park, this alignment with the SaferCities network will allow further insights and education on mass gatherings and efficient management,” continued Parker. SaferCities works across Government, transportation, councils, business associations, education, restaurants, parks and public areas, and private companies who wish to share live visual information from public facing cameras and ANPR (Automatic Number Plate Recognition) systems to assist with safe city initiatives. “We are thrilled to enhance the strong relationship between Eden Park and NZ Police through the vGRID SaferCity technology, providing Eden Park the ability to send Police live visual information when needed for a collaborative response, which ultimately will

create safer events,” stated SaferCities Managing Director Scott Bain. “Having access to live visual information from Eden Park during large planned events will be of great value to our people who are responsible for leading the police response,” said Police Deployment Manager for Tāmaki Makaurau, Superintendent Shanan Gray. “Having real-time situational awareness from coordination locations such as our District Command Centre and Emergency Communications Centre is vital to informing our deployment decisions and ensuring we can help keep people safe.” June/July 2021

fired up protection LOKTRONIC’s expansive product range has just become even wider with these first class EGRESS and FIRE PROTECTION DEVICES and PROTECTIVE COVERS.

NEW

STI-1130 Ref. 720-102

STI-WRP2-RED-11 IP67 Ref. 720-062R

Surface mount with horn and spacer 255mm H x 179mm W x 135mm D

Also available in White.

STI-RP-WS-11/CN Ref. 720-052W Available in White, Green, Blue & Yellow.

STI-13000-NC Ref. 720-090 Flush mount, no horn 206mm H x 137mm W x 69mm D

STI-RP-GF-11/CN Ref. 720-051G Available in White, Green, Blue & Yellow.

NEW

STI-RP-RS-02/CI

STI-13B10-NW Ref. 720-092 Surface mount, horn and label optional 206mm H x 137mm W x 103mm D

Ref. 720-058 Cover included. Flush Mount Available. • •

STI-1100 Ref. 720-054

•

Flush mount with horn 255mm H x 179mm W x 86mm D

•

• • • • •

STI-6518 Ref. 720-060 Flush mount, no horn 165mm H x 105mm W x 49mm D

STI-13210-NG Ref. 720-093 Surface mount, horn and label optional 206mm H x 137mm W x 103mm D

All STI ‘Stoppers’ are made of tough, UV stabilised polycarbonate. Many can be supplied with or without a 105 dB horn. Other models and sizes available including weather resistant options.

Approved to EN54-11 Current Rating: 3 Amps @ 12-24V DC, 3 Amps @ 125-250V AC Material: Polycarbonate Comes with Clear Cover 2 x SPDT switches Positive activation that mimics the feel of breaking glass. Visible warning flag confirms activation. Simple polycarbonate key to reset operating element - no broken glass. Dimensions: 87mm Length x 87mm Width x 23mm Depth (Flush Mount) & 58mm Depth (Surface Mount)

STI-6255 Ref. 720-042

Mini Theft Stopper discourages inappropriate use of equipment. Sounds a powerful 105 dB warning horn when activated. Tough, ABS construction. Reed switch activation for cabinets and display cases or unique clip activation for freestanding equipment. Does not interfere with use of protected fire fighting equipment. Compact design 85mm H x 85mm W x 25mm D.

STI-6720 Ref. 720-047

Break Glass Stopper. Keys under plexiglas. Protects emergency keys from inappropriate use. Keys remain visible. Fast, easy installation. Simple, inexpensive plexiglas. 3 year guarantee against breakage of the ABS housing within normal use.

NEW

Battery Load Tester Ref. 730-101

Fire Brigade Alarm: (Closed/Open) Ref. 730-231

Anti-Interference Device

ViTECH, strong, lightweight aluminum case, 5, 15 and 30 amp battery load tester for fire and alarm use. Weight: 500gms, Size: 165mm x 90 x 70mm.

ViTECH branded Type X (730-230) and Type Y (illustrated) models with temperature compensated pressure transducers with digital display showing pressures for defect, fire and pump start.

Ref. 730-400 series ViTECH AID for sprinkler valve monitoring; fits all ball valve sizes.

21620/1/18

21620

ViTECH products are designed and produced in New Zealand.

Due to ticket availability the opportunity to win tickets will now be for The Rugby Championship!

T H E U LT I M A T E WITH 3 BUDDIES ALL BLACKS

TICKETS WORTH OVER

SPRINGBOKS

$4K

Win 4 tickets to the final game of The Rugby Championship at Eden Park on the 2nd October!

WATCH US WIN AGAIN WITH THREE OF YOUR MATES! ULTIMATE PACKAGE INCLUDES: • Reserved category A or B match tickets • Four course seated meal • Premium beverage service prematch and post match

• Master of Ceremonies, guest speakers and entertainment • Match day programme 1 per 2 guests • Host service

To win, spend over $1,000* at Hills New Zealand on Dahua products to be eligible. Competition runs from 1st June to 23rd September, 2021

210513 Dahua NZSM v9

• Pre and post-match corporate hospitality service

For more information on Dahua and other best-in-class solutions 08001 HILLS (44557) or hills.co.nz Follow us on

Hills Limited NZ

YO U C A N R E LY O N H I L L S Terms and Conditions: Every Hills NZ Limited (“Hills NZ”) customer resident in New Zealand and who spends a minimum of $1,000 excluding GST on Dahua products on a single invoice through the promotion period from Hills NZ, will receive one (1) entry in the prize draw to win four tickets including hospitality to The Rugby Championship held at Eden Park on the 2nd October 2021. The prize is valued at $4,249 including GST (RRP). Win the Ultimate Cup Experience runs between 1 June, 2021 and 23 September, 2021 inclusive (“promotion period”). The winner will be drawn on Friday 24 September 2021, at Hills NZ head office in Auckland NZ. The winner will be notified by phone and published online at Hills.co.nz. If tickets are unavailable, Hills NZ reserves the right to substitute with a prize of equal value. Hills NZ reserves the right to change these terms at any time by notice on its website. Please visit the website www.hills.co.nz/rugbycompetition-dahua for full competition details, terms and conditions.

New Zealand Security - June-July 2021

Articles inside

What the private sector can learn from militaries about the convergence of cyber and physical threats

Boost security at remote locations with Hikvision’s solar-powered stand-alone security solutions

From the editor

Question and Answer time – DSC PowerSeries Neo